Approved changes feed: RSS · Atom

cpe:2.3:o:dlink:dap_2622_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorDlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44)
ProductDap 2622 Firmware (895e3743-b824-5e15-83dd-6f22e5dcd822)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-41215 vulnerable 2026-06-08 06:11:05.559794 D-Link DAP-2622 DDP Set Date-Time Stack-based Buffer Overflow Remote Code Execution Vulnerability
HIGH (8.8)
D-Link DAP-2622 DDP Set Date-Time Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. . Was ZDI-CAN-20086.
Published: 2024-05-03T02:12:09.157Z
Updated: 2024-09-18T18:30:00.296Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37326 vulnerable 2026-06-08 06:08:15.142949 D-Link DAP-2622 DDP Set Wireless Info Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability
HIGH (8.8)
D-Link DAP-2622 DDP Set Wireless Info Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. . Was ZDI-CAN-20103.
Published: 2024-05-03T01:58:19.176Z
Updated: 2024-09-18T18:29:29.406Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37325 vulnerable 2026-06-08 06:08:15.135434 D-Link DAP-2622 DDP Set SSID List Missing Authentication Vulnerability
MEDIUM (5.4)
D-Link DAP-2622 DDP Set SSID List Missing Authentication Vulnerability. This vulnerability allows network-adjacent attackers to make unauthorized changes to device configuration on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to manipulate wireless authentication settings. . Was ZDI-CAN-20104.
Published: 2024-05-07T22:55:06.373Z
Updated: 2024-09-18T18:29:28.677Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37324 vulnerable 2026-06-08 06:08:15.134926 D-Link DAP-2622 DDP Set Wireless Info Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability
HIGH (8.8)
D-Link DAP-2622 DDP Set Wireless Info Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. . Was ZDI-CAN-20102.
Published: 2024-05-03T01:58:18.455Z
Updated: 2024-09-18T18:29:27.951Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37323 vulnerable 2026-06-08 06:08:15.134375 D-Link DAP-2622 DDP Set SSID List PSK Stack-based Buffer Overflow Remote Code Execution Vulnerability
HIGH (8.8)
D-Link DAP-2622 DDP Set SSID List PSK Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. . Was ZDI-CAN-20101.
Published: 2024-05-03T01:58:17.652Z
Updated: 2024-09-18T18:29:27.235Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37322 vulnerable 2026-06-08 06:08:15.133820 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37321 vulnerable 2026-06-08 06:08:15.133403 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37320 vulnerable 2026-06-08 06:08:15.132735 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37319 vulnerable 2026-06-08 06:08:15.132298 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37318 vulnerable 2026-06-08 06:08:15.131655 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37317 vulnerable 2026-06-08 06:08:15.130953 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37316 vulnerable 2026-06-08 06:08:15.130314 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37315 vulnerable 2026-06-08 06:08:15.129774 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37314 vulnerable 2026-06-08 06:08:15.129348 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37313 vulnerable 2026-06-08 06:08:15.128743 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37312 vulnerable 2026-06-08 06:08:15.128072 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37311 vulnerable 2026-06-08 06:08:15.127413 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37310 vulnerable 2026-06-08 06:08:15.124755 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35756 vulnerable 2026-06-08 06:06:27.528356 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35755 vulnerable 2026-06-08 06:06:27.527846 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35754 vulnerable 2026-06-08 06:06:27.527230 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35753 vulnerable 2026-06-08 06:06:27.526822 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35752 vulnerable 2026-06-08 06:06:27.526297 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35751 vulnerable 2026-06-08 06:06:27.525877 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35750 vulnerable 2026-06-08 06:06:27.525374 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35749 vulnerable 2026-06-08 06:06:27.524672 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35747 vulnerable 2026-06-08 06:06:27.523691 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35746 vulnerable 2026-06-08 06:06:27.523294 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35745 vulnerable 2026-06-08 06:06:27.522882 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35744 vulnerable 2026-06-08 06:06:27.522368 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35743 vulnerable 2026-06-08 06:06:27.521962 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35742 vulnerable 2026-06-08 06:06:27.521544 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35741 vulnerable 2026-06-08 06:06:27.521026 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35739 vulnerable 2026-06-08 06:06:27.520092 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35738 vulnerable 2026-06-08 06:06:27.519472 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35737 vulnerable 2026-06-08 06:06:27.518843 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35736 vulnerable 2026-06-08 06:06:27.518407 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35735 vulnerable 2026-06-08 06:06:27.517891 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35733 vulnerable 2026-06-08 06:06:27.516643 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35732 vulnerable 2026-06-08 06:06:27.516026 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35729 vulnerable 2026-06-08 06:06:27.514534 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35728 vulnerable 2026-06-08 06:06:27.513834 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35727 vulnerable 2026-06-08 06:06:27.513437 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35726 vulnerable 2026-06-08 06:06:27.513024 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35725 vulnerable 2026-06-08 06:06:27.512580 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35724 vulnerable 2026-06-08 06:06:27.510967 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35718 vulnerable 2026-06-08 06:06:27.493208 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.