Analysis Summary

CVE-2023-35749 CVSS:8.8

D-Link DAP-2622 WiFi Router is vulnerable to a stack-based buffer overflow, caused by improper bounds checking in Set Date-Time NTP Server. By sending a specially crafted request, a remote authenticated attacker could overflow a buffer and execute arbitrary code in the context of root on the system.

CVE-2023-35757 CVSS:8.8

D-Link DAP-2622 WiFi Router is vulnerable to a stack-based buffer overflow, caused by improper bounds checking in Firmware Upgrade Filename. By sending a specially crafted request, a remote authenticated attacker could overflow a buffer and execute arbitrary code in the context of root on the system.

Impact

• Gain Access
• Buffer Overflow

Indicators of Compromise

CVE

• CVE-2023-35749
• CVE-2023-35757

Affected Vendors

Remediation

Refer to D-Link Website for patch, upgrade, or suggested workaround information.

D-Link Website