DIR-3040 vulnerabilities

4 known vulnerabilities in DIR-3040 from D-Link. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  DIR-3040: Out-of-bounds Write

  CVE-2023-41230May 3, 2024D-Link

  D-Link DIR-3040 HTTP Request Processing Referer Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication

• 8.8 High severity

  DIR-3040: Out-of-bounds Write

  CVE-2023-41229May 3, 2024D-LinkEPSS 1.04%

  D-Link DIR-3040 HTTP Request Processing Referer Heap-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication

• 7.1 High severity

  DIR-3040: Out-of-bounds Write

  CVE-2023-41217May 3, 2024D-Link

  D-Link DIR-3040 prog.cgi SetQuickVPNSettings Password Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authenti

• 8.8 High severity

  DIR-3040: Heap-based Buffer Overflow

  CVE-2022-43648Mar 29, 2023D-Link

  This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 1.20B03 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MiniDLNA service. The