[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$foAFLwpnCO0XJmX_40v_craSp13mZ7k1Y_JvXvFOxfYc":3,"g5a-ex:dlink\u002Fdap-2622_firmware@*":85,"g5a-family:dlink\u002Fdap-2622_firmware":87},{"success":4,"data":5},true,{"product":6,"versions":20,"topVulnerabilitiesByEpss":23,"kevVulnerabilities":62,"seoMetadata":63,"meta":82},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":19},"dlink","dap-2622_firmware",2,48,0,"2024-05-07",[14,17],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"1.00",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"1.10b03r022","Dap-2622 Firmware by Dlink is a technology product with 2 tracked versions and 48 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[21,22],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},[24,32,36,40,44,47,50,53,56,59],{"cveId":25,"description":26,"publishedDate":27,"cvssScore":28,"cvssVersion":29,"severity":30,"isKev":16,"epssScore":31},"CVE-2023-35744","D-Link DAP-2622 DDP Configuration Restore Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the DDP service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.\n. Was ZDI-CAN-20071.","2024-05-03",8.8,"v3.1","High",0.03088,{"cveId":33,"description":34,"publishedDate":27,"cvssScore":28,"cvssVersion":29,"severity":30,"isKev":16,"epssScore":35},"CVE-2023-35743","D-Link DAP-2622 DDP Configuration Restore Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the DDP service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.\n. Was ZDI-CAN-20070.",0.01131,{"cveId":37,"description":38,"publishedDate":27,"cvssScore":28,"cvssVersion":29,"severity":30,"isKev":16,"epssScore":39},"CVE-2023-35725","D-Link DAP-2622 DDP User Verification Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the DDP service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.\n. Was ZDI-CAN-20052.",0.01094,{"cveId":41,"description":42,"publishedDate":27,"cvssScore":28,"cvssVersion":29,"severity":30,"isKev":16,"epssScore":43},"CVE-2023-35726","D-Link DAP-2622 DDP User Verification Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the DDP service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.\n. Was ZDI-CAN-20053.",0.0108,{"cveId":45,"description":46,"publishedDate":27,"cvssScore":28,"cvssVersion":29,"severity":30,"isKev":16,"epssScore":43},"CVE-2023-35729","D-Link DAP-2622 DDP Reset Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the DDP service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.\n. Was ZDI-CAN-20056.",{"cveId":48,"description":49,"publishedDate":27,"cvssScore":28,"cvssVersion":29,"severity":30,"isKev":16,"epssScore":43},"CVE-2023-35730","D-Link DAP-2622 DDP Reset Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the DDP service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.\n. Was ZDI-CAN-20057.",{"cveId":51,"description":52,"publishedDate":27,"cvssScore":28,"cvssVersion":29,"severity":30,"isKev":16,"epssScore":43},"CVE-2023-35728","D-Link DAP-2622 DDP Reboot Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the DDP service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.\n. Was ZDI-CAN-20055.",{"cveId":54,"description":55,"publishedDate":27,"cvssScore":28,"cvssVersion":29,"severity":30,"isKev":16,"epssScore":43},"CVE-2023-35732","D-Link DAP-2622 DDP Reset Factory Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the DDP service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.\n. Was ZDI-CAN-20059.",{"cveId":57,"description":58,"publishedDate":27,"cvssScore":28,"cvssVersion":29,"severity":30,"isKev":16,"epssScore":43},"CVE-2023-35733","D-Link DAP-2622 DDP Change ID Password Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the DDP service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.\n. Was ZDI-CAN-20060.",{"cveId":60,"description":61,"publishedDate":27,"cvssScore":28,"cvssVersion":29,"severity":30,"isKev":16,"epssScore":43},"CVE-2023-35731","D-Link DAP-2622 DDP Reset Factory Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the DDP service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.\n. Was ZDI-CAN-20058.",[],{"title":64,"metaDescription":65,"keywords":66,"structuredData":67},"Dap-2622 Firmware by Dlink - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Dap-2622 Firmware by Dlink covering 2 versions with 48 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Dap-2622 Firmware vulnerabilities, Dap-2622 Firmware security, Dap-2622 Firmware CVE, Dlink Dap-2622 Firmware, Dap-2622 Firmware threat intelligence, Dlink security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":68,"@type":69,"name":70,"description":65,"url":71,"manufacturer":72,"applicationCategory":76,"softwareVersion":77,"mainEntity":78},"https:\u002F\u002Fschema.org","SoftwareApplication","Dap-2622 Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fdlink\u002Fdap-2622_firmware",{"@type":73,"name":74,"url":75},"Organization","Dlink","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fdlink","Security Software","2 versions tracked",{"@type":79,"name":80,"description":81,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Dap-2622 Firmware Security Vulnerabilities","Security vulnerabilities affecting Dap-2622 Firmware by Dlink",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":83,"apiVersion":84},"2026-10-17T20:40:20.830Z","3.0",{"rows":86,"total":11,"capped":16,"failed":11},[],[]]