CVE-2022-41140

HIGH EXPLOITED

D-Link DIR-882-US Firmware < 1.30b07 - Unauthenticated Stack-based Buffer Overflow in lighttpd Service

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2022-41140 has been observed exploited in the wild (reported by VulnCheck KEV).

Description

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple D-Link routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the lighttpd service, which listens on TCP port 80 by default. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-13796.

References (2)

Core 2

Scores

CVSS v3 8.8
EPSS 0.0259
EPSS Percentile 85.8%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

VulnCheck KEV 2025-02-27
CWE
CWE-121 CWE-787
Status published
Products (3)
dlink/dir-867_firmware < 1.30b08
dlink/dir-878_firmware < 1.30b06
dlink/dir-882-us_firmware < 1.30b07
Published Jan 26, 2023
Tracked Since Feb 18, 2026