CVE-2023-45579 in DI-7003GV2.D1
Summary
by MITRE • 10/25/2023
Buffer Overflow vulnerability in DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and before allows a remote attacker to execute arbitrary code via the ip/type parameter of the jingx.asp function.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 02/11/2026
This buffer overflow vulnerability exists within multiple D-Link networking devices including models DI-7003GV2, DI-7100G+V2, DI-7100GV2, DI-7200G+V2, DI-7200GV2.E1, DI-7300G+V2, and DI-7400G+V2, all running firmware versions up to and including the specified dates. The vulnerability manifests in the jingx.asp function where the ip/type parameter is processed without adequate bounds checking, creating a classic buffer overflow condition that can be exploited by remote attackers. The affected devices are network appliances that typically serve as routers, switches, or access points in enterprise and home networks, making them attractive targets for cybercriminals seeking to gain unauthorized access to network infrastructure. This vulnerability represents a critical security risk as it allows for remote code execution, which can lead to complete system compromise and potential lateral movement within the network.
The technical flaw stems from improper input validation within the web interface of these networking devices, specifically in how the system handles the ip/type parameter in the jingx.asp file. When an attacker submits a malformed request containing an excessively long string in the ip/type parameter, the system fails to properly validate the input length before copying it into a fixed-size buffer. This classic buffer overflow condition occurs because the application does not implement proper bounds checking or input sanitization mechanisms, allowing the attacker to overwrite adjacent memory locations including return addresses and control data. The vulnerability is classified as a CWE-121 heap-based buffer overflow or CWE-122 stack-based buffer overflow depending on the specific implementation details, and it directly maps to ATT&CK technique T1210 - Exploitation of Remote Services and T1059 - Command and Scripting Interpreter, as it enables remote code execution through web-based exploitation.
The operational impact of this vulnerability extends beyond simple remote code execution to encompass complete network compromise and potential data breaches. Attackers can leverage this vulnerability to install backdoors, modify network configurations, redirect traffic, or establish persistent access to the compromised network infrastructure. The affected devices typically operate in critical network positions where they control traffic flow, authentication, and network segmentation, making their compromise particularly dangerous. Organizations may experience service disruption, unauthorized network access, data exfiltration, and potential compliance violations if these devices are part of regulated environments. The vulnerability affects multiple device models and firmware versions, indicating a widespread issue that requires immediate attention from network administrators and security teams. Given the nature of network infrastructure devices, the attack surface is extensive and can potentially impact large enterprise networks or even internet-facing services.
Mitigation strategies should include immediate firmware updates from D-Link to address the identified buffer overflow vulnerability, as the vendor has likely released patches to resolve this issue. Network administrators should also implement network segmentation to limit the potential impact of compromise, disable unnecessary web services on affected devices, and monitor network traffic for suspicious activity related to the vulnerable jingx.asp function. Additional protective measures include implementing web application firewalls to filter malicious requests, conducting thorough vulnerability assessments of all network devices, and establishing network monitoring procedures to detect exploitation attempts. Organizations should also consider disabling remote management features where possible and ensure that only authorized personnel have access to network device configuration interfaces. The vulnerability highlights the importance of regular firmware updates and proper input validation in network infrastructure devices, as well as the need for comprehensive security testing of web interfaces in embedded systems to prevent similar issues from occurring in the future.