D-Link DAP-1620 Stack-Based Buffer Overflow Vulnerability

A critical stack-based buffer overflow vulnerability has been identified in the D-Link DAP-1620 router, specifically in version 1.03. The issue arises in the check_dws_cookie function within the /storage file, where the uid parameter is processed without proper length validation. This vulnerability can be exploited remotely, without authentication, and affects devices that are no longer supported by the manufacturer.

Impact

Exploitation of this vulnerability allows for a stack-based buffer overflow, which could lead to arbitrary code execution or causing the device to crash.

Remediation

It is recommended to use a firewall to block access to the vulnerable function or file.