Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2023-45578: Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-...
CVE-2023-45578 · published 3 years ago
Summary
Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and be...
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| dlink | di-7003g_firmware |
<= 23.08.25d1 cpe:2.3:o:dlink:di-7003g_firmware:*:*:*:*:*:*:*:* |
| dlink | di-7100g\+_firmware |
<= 23.08.23d1 cpe:2.3:o:dlink:di-7100g\+_firmware:*:*:*:*:*:*:*:* |
| dlink | di-7100g_firmware |
<= 23.08.23d1 cpe:2.3:o:dlink:di-7100g_firmware:*:*:*:*:*:*:*:* |
| dlink | di-7200g\+_firmware |
<= 23.08.23d1 cpe:2.3:o:dlink:di-7200g\+_firmware:*:*:*:*:*:*:*:* |
| dlink | di-7200g_firmware |
<= 23.08.23e1 cpe:2.3:o:dlink:di-7200g_firmware:*:*:*:*:*:*:*:* |
| dlink | di-7300g\+_firmware |
<= 23.08.23d1 cpe:2.3:o:dlink:di-7300g\+_firmware:*:*:*:*:*:*:*:* |
| dlink | di-7400g\+_firmware |
<= 23.08.23d1 cpe:2.3:o:dlink:di-7400g\+_firmware:*:*:*:*:*:*:*:* |
Original advisory text
Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-...
Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and before allows a remote attacker to execute arbitrary code via the pap_en/chap_en parameter of the pppoe_base.asp function.
References
- https://github.com/Archerber/bug_submit/blob/main/D-Link/DI-7xxxx/bug4.md Exploit Third Party Advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Type
CWE-787Out-of-bounds Write
Timeline
Published16 Oct 2023
Updated31 Oct 2026
First seen29 Sep 2026
Sources
CVE-2023-45578 · NVD
Track software like this
Free during beta