CVE-2022-43622
published 2023-03-29CVE-2022-43622: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Authentication is not…
PriorityP357high8.8CVSS 3.1
AVAACLPRNUINSUCHIHAH
EPSS
0.99%
62.3th percentile
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of Login requests to the web management portal. When parsing the HNAP_AUTH header, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-16139.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| d-link | dir-1935 | — | — |
| dlink | dir-1935_firmware | <= 1.02 | — |
| dlink | dir-1935_firmware | — | — |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv3.08.8HIGHCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
D-Link DIR-1935 stack-based overflow (ZDI-22-1491 / EUVD-2022-46618)
vuldb·2026-09-11·CVSS 8.8
CVE-2022-43622 [HIGH] D-Link DIR-1935 stack-based overflow (ZDI-22-1491 / EUVD-2022-46618)
A vulnerability, which was classified as critical, has been found in D-Link DIR-1935. Affected by this issue is some unknown functionality. This manipulation causes stack-based buffer overflow.
This vulnerability appears as CVE-2022-43622. The attacker needs to be present on the local network. There is no available exploit.
It is advisable to upgrade the affected component.
GHSA
GHSA-94w7-67qp-92gp: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1
ghsa_unreviewed·2023-03-29
CVE-2022-43622 [HIGH] CWE-121 GHSA-94w7-67qp-92gp: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of Login requests to the web management portal. When parsing the HNAP_AUTH header, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-16139.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-03-29
Published