SB2024011528 - Multiple vulnerabilities in D-Link DCS-8300LHV2

Main Vulnerability Database SB2024011528

SB2024011528 - Multiple vulnerabilities in D-Link DCS-8300LHV2

Published: January 15, 2024

Security Bulletin ID SB2024011528

Severity

Medium

Patch available

YES

Number of vulnerabilities 6

Exploitation vector Adjecent network

Highest impact Code execution

Breakdown by Severity

Low
Medium
High
Critical

Description

This security bulletin contains information about 6 secuirty vulnerabilities.

1) Stack-based buffer overflow (CVE-ID: CVE-2023-51627)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when parsing the Duration XML elements within ONVIF Duration. A remote user on the local network can trigger stack-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

2) Stack-based buffer overflow (CVE-ID: CVE-2023-51624)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the handling of the Authorization header by the RTSP server in the ValidateAuthorizationHeader function. A remote unauthenticated attacker on the local network can trigger stack-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

3) OS Command Injection (CVE-ID: CVE-2023-51625)

The vulnerability allows a remote attacker to execute arbitrary shell commands on the target system.

The vulnerability exists due to improper input validation within the implementation of the ONVIF API in the SetSystemDateAndTime function. A remote user on the local network can pass specially crafted data to the application and execute arbitrary OS commands on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

4) Stack-based buffer overflow (CVE-ID: CVE-2023-51626)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the handling of the Authorization header by the RTSP server. A remote unauthenticated attacker on the local network can trigger stack-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

5) Stack-based buffer overflow (CVE-ID: CVE-2023-51628)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the handling of the SetHostName ONVIF call. A remote user on the local network can trigger stack-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

6) Improper Authentication (CVE-ID: CVE-2023-51629)

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to an error when processing authentication requests within the configuration of the ONVIF API. A remote attacker on the local network can bypass authentication process and gain unauthorized access to the application.

Remediation

Install update from vendor's website.

References