D-Link DCS-932L Stack-Based Buffer Overflow Vulnerability

A critical stack-based buffer overflow vulnerability has been identified in the D-Link DCS-932L camera, specifically in version 2.18.01. The issue arises in the function sub_404780 within the file /bin/gpio, where the argument CameraName can be manipulated to cause the overflow. This vulnerability is remote-exploitable and affects a product that is no longer supported by the manufacturer.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, which can commonly result in arbitrary code execution or causing a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by sending a crafted request that manipulates the CameraName parameter, exploiting the buffer overflow in the sub_404780 function of the /bin/gpio file.