Skip to content
OpenAdvisories
High WID-SEC-2023-2168 4 CVEs

Verschiedene D-LINK Router und Access Point Modelle: Mehrere Schwachstellen

Published Aug 24, 2023 · Updated May 7, 2024 · Revision 3 · de-DE

Vendor: D-Link Product: Access Point (AP) Product: Router

Summary

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in verschiedenene D-LINK Routern und Access Points ausnutzen, um die Netzwerkinfrastruktur anzugreifen, beliebigen Code auszuführen oder Sicherheitsmaßnahmen zu umgehen.

Product

Router der Firma D-LINK enthalten eine Firewall und in der Regel eine WLAN-Schnittstelle. Die Geräte sind hauptsächlich für private Anwender und Kleinunternehmen konzipiert.

Vulnerabilities 4

  • High 8.8
    CVE-2023-35749

    D-Link DAP-2622 DDP Firmware Upgrade Filename Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DAP-2622 DDP Firmware Upgrade Filename Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication …

    D-Link DAP-2622 Network devices
  • High 8.8
    CVE-2023-35757

    D-Link DAP-2622 DDP Set Date-Time NTP Server Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DAP-2622 DDP Set Date-Time NTP Server Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication i…

    D-Link DAP-2622 Network devices
  • Medium 5.4
    CVE-2023-37325

    D-Link DAP-2622 DDP Set SSID List Missing Authentication Vulnerability

    D-Link DAP-2622 DDP Set SSID List Missing Authentication Vulnerability. This vulnerability allows network-adjacent attackers to make unauthorized changes to device configuration on affected installations of D-Link DAP-2622 routers. Authentication is not requi…

    D-Link DAP-2622 Network devices
  • Medium 5.3
    CVE-2023-41603

    D-Link R15 before v1.08.02 was discovered to contain no firewall restrictions for IPv6 traffic. This allows attackers t…

Revision history

  1. #3

    CVE ergänzt

  2. #2

    CVE-2023-41603 ergänzt

  3. #1

    Initiale Fassung

References