PT-2020-6513 · D Link · D-Link Dap-2020

Chung96Vn + 2 · Published 2020-08-21 · Updated 2023-11-08 · CVE-2021-27248

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DAP-2020 version 1.01rc001

Description The issue is related to a buffer overflow on the stack in the webproc getpage scenario of the D-Link DAP-2020 Wi-Fi access point's firmware. This can be exploited by network-adjacent attackers to execute arbitrary code on affected installations without requiring authentication. The flaw exists in the processing of CGI scripts, specifically when parsing the getpage parameter, where the length of user-supplied data is not properly validated before being copied to a fixed-length stack-based buffer. This allows an attacker to execute code in the context of root.

Recommendations For D-Link DAP-2020 version 1.01rc001, as a temporary workaround, consider restricting access to the webproc getpage scenario until a patch is available. Avoid using the getpage parameter in the affected CGI scripts to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2021-05727

CVE-2021-27248

ZDI-21-203

Affected Products

D-Link Dap-2020

References · 5

• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10201 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-27248 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-21-203 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-27248 · Security Note
• https://bdu.fstec.ru/vul/2021-05727 · Security Note