D-Link DAP-1320 Heap-Based Buffer Overflow Vulnerability in set_ws_action Function

A critical heap-based buffer overflow vulnerability has been identified in the D-Link DAP-1320 range extender, specifically in version 1.00. The issue arises in the set_ws_action function within the file /dws/api/. This vulnerability can be exploited remotely and affects products that are no longer supported by the manufacturer.

Impact

Exploitation of this vulnerability leads to a heap-based buffer overflow, which can commonly result in arbitrary code execution or causing a denial-of-service condition.

Remediation

D-Link recommends retiring products that are no longer supported and replacing them with devices that receive regular firmware updates.