NetSight
critical9.8

CVE-2021-43722

D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow.

Impact

D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow. The hnap_main function in the cgibin handler uses sprintf to format the soapaction header onto the stack and has no limit on the size.

Affected products

VendorProductAffected versions
DlinkDir-645 Firmware
Version 1.03

Weakness classification

References