ZDI-23-1826: D-Link G416 httpd API-AUTH Digest Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2023-50210.

api arbitrary code attackers auth authentication buffer buffer overflow code code execution cve cves cvss digest d-link exploit httpd link network overflow rating remote code remote code execution routers stack vulnerability zdi