D-Link DAP-1620 Stack-Based Buffer Overflow Vulnerability in Cookie Handler

A critical stack-based buffer overflow vulnerability has been identified in the D-Link DAP-1620 access point, specifically in version 1.03. The issue arises in the Cookie Handler component, within the 'check_dws_cookie' function of the '/storage' file. This vulnerability can be exploited remotely, without any authentication, and affects products that are no longer supported by the manufacturer.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.

Remediation

It is recommended to use a firewall to block access to the vulnerable device.