D-Link DI-8003 Buffer Overflow Vulnerability in thd_member.asp Endpoint

A buffer overflow vulnerability has been identified in the D-Link DI-8003 router, specifically in the firmware version 16.07.26A1. The vulnerability arises from inadequate validation of the 'id' parameter in the '/thd_member.asp' endpoint, which can be exploited to cause a stack overflow, leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability causes a denial-of-service condition by triggering a buffer overflow that disrupts normal device operation.

Reproduction

To reproduce this vulnerability, send a request to the '/thd_member.asp' endpoint with an overly long 'id' parameter. The excessive length of the parameter will cause a buffer overflow, disrupting the device's normal functioning.