D-Link DCS-932L Stack-Based Buffer Overflow Vulnerability

A critical stack-based buffer overflow vulnerability has been identified in the D-Link DCS-932L camera, running firmware version 2.18.01. The issue arises in the SubUPnPCSInit function within the /sbin/udev file, where improper handling of the CameraName argument allows for remote exploitation. This vulnerability affects devices that are no longer supported by the manufacturer.

Impact

Exploitation of this vulnerability allows for a stack-based buffer overflow, which could lead to arbitrary code execution or causing the device to crash.

Reproduction

The vulnerability can be reproduced by sending a crafted UPnP request that includes a malicious CameraName argument. This request should be directed to the camera's UPnP service, which will trigger the buffer overflow in the udev process.