CVE-2021-43722: dlink dir-645_firmware Out-of-bounds Write

Vulnerability summary

CVE-2021-43722 is a critical (CVSS 9.8) Out-of-bounds Write vulnerability in dlink dir-645_firmware. EPSS estimates a 3.16% chance of exploitation in the next 30 days, higher than 87.8% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 31-03-2022
   PublishedVulnerability first disclosed.
2. 04-08-2024
   Last modifiedVulnerability information updated.

Description

D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow. The hnap_main function in the cgibin handler uses sprintf to format the soapaction header onto the stack and has no limit on the size.

• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.