PT-2025-21814 · D Link · D-Link Dcs-932L
Beacox
·
Publicado
2025-05-17
·
Atualizado
2025-06-03
·
CVE-2025-4841
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
D-Link DCS-932L version 2.18.01
Description:
A critical issue affects the function
sub 404780 of the file /bin/gpio. The manipulation of the argument CameraName leads to a stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This issue only affects products that are no longer supported by the maintainer.Recommendations:
For D-Link DCS-932L version 2.18.01, as a temporary workaround, consider disabling the
sub 404780 function until a patch is available. Restrict access to the /bin/gpio file to minimize the risk of exploitation. Avoid using the CameraName argument in affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Stack Overflow
Memory Corruption
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
D-Link Dcs-932L