D-Link DCS-932L Stack-Based Buffer Overflow Vulnerability

A critical stack-based buffer overflow vulnerability has been identified in the D-Link DCS-932L camera, specifically in version 2.18.01. The issue arises in the 'isUCPCameraNameChanged' function within the '/sbin/ucp' file, where improper handling of the 'CameraName' argument creates the potential for remote exploitation. This vulnerability affects devices that are no longer supported by the manufacturer.

Impact

Exploitation of this vulnerability allows for a stack-based buffer overflow, which could lead to arbitrary code execution or causing the device to crash.

Reproduction

The vulnerability can be reproduced by sending a crafted request to the '/sbin/ucp' endpoint, specifically targeting the 'CameraName' argument. This request should be made over the network, as the vulnerability can be exploited remotely.