CVE-2023-45574

published 2023-10-16

CVE-2023-45574: Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and before allows a remote attacker to execute arbitrary code via the fn parameter of the file.data function.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
dlink	di-7003g_firmware	<= 23.08.25d1	—
dlink	di-7100g_+_firmware	<= 23.08.23d1	—
dlink	di-7100g_firmware	<= 23.08.23d1	—
dlink	di-7200g_+_firmware	<= 23.08.23d1	—
dlink	di-7200g_firmware	<= 23.08.23e1	—
dlink	di-7300g_+_firmware	<= 23.08.23d1	—
dlink	di-7400g_+_firmware	<= 23.08.23d1	—

CWE-787