CVE-2023-45577

Published: Oct 16, 2023Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Stack Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and before allows a remote attacker to execute arbitrary code via the wanid parameter of the H5/speedlimit.data function.

Affected (7)

Products: Dlink: Di 7003g Firmware, Di 7100g Firmware, Di 7200g Firmware, Di 7300g+ Firmware, Di 7400g+ Firmware

5 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Di 7003g Firmware	Up to 23.08.25d1

Running on/with	Platform Versions
Dlink Di 7003g	Version v2.d1

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Di 7100g+ Firmware	Up to 23.08.23d1

Running on/with	Platform Versions
Dlink Di 7100g+	Version v2.d1

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Di 7100g Firmware	Up to 23.08.23d1

Running on/with	Platform Versions
Dlink Di 7100g	Version v2.d1

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Di 7200g+ Firmware	Up to 23.08.23d1

Running on/with	Platform Versions
Dlink Di 7200g+	Version v2.d1

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Di 7200g Firmware	Up to 23.08.23e1

Running on/with	Platform Versions
Dlink Di 7200g	Version v2.e1

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Di 7300g+ Firmware	Up to 23.08.23d1

Running on/with	Platform Versions
Dlink Di 7300g+	Version v2.d1

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Di 7400g+ Firmware	Up to 23.08.23d1

Running on/with	Platform Versions
Dlink Di 7400g+	Version v2.d1

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (2)

https://github.com/Archerber/bug_submit/blob/main/D-Link/DI-7xxxx/bug9.md

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/Archerber/bug_submit/blob/main/D-Link/DI-7xxxx/bug9.md

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.