[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2023-32136":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":19,"cwes":20,"cpes":23,"technologies":28,"references":33,"score":36,"epss_score":37,"epss_percentile":38,"is_kev":19,"cisa_kev_date_added":39,"cisa_kev_due_date":39,"cisa_ssvc":40,"attack_mappings":50,"exploits":51},340687,"CVE-2023-32136","EUVD-2023-36404","D-Link DAP-1360 webproc var:menu Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling requests to the \u002Fcgi-bin\u002Fwebproc endpoint. When parsing the var:menu parameter, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.\n. Was ZDI-CAN-18414.","2024-05-03T02:15:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":15,"userInteraction":17,"attackComplexity":18,"availabilityImpact":15,"privilegesRequired":17,"confidentialityImpact":15},"UNCHANGED","3.1",8.8,"ADJACENT_NETWORK","HIGH","CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NONE","LOW",false,[21,22],"CWE-121","CWE-787",[24,25,26,27],"cpe:2.3:h:dlink:dap-2020:a2:*:*:*:*:*:*:*","cpe:2.3:h:dlink:dap-1360:f1:*:*:*:*:*:*:*","cpe:2.3:o:dlink:dap-1360_firmware:*:*:*:*:*:*:*:*","cpe:2.3:o:dlink:dap-2020_firmware:*:*:*:*:*:*:*:*",[29,30,31,32],"Dlink Dap-2020 Firmware","Dlink Dap-2020","Dlink Dap-1360","Dlink Dap-1360 Firmware",[34,35],"https:\u002F\u002Fsupportannouncement.us.dlink.com\u002Fannouncement\u002Fpublication.aspx?name=SAP10324","https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-23-528\u002F",0.44,0.01155,0.66799,null,{"timestamp":41,"automatable":42,"tech_impact":43,"exploitation":44,"cisa_decision":45,"cisa_remediation_timeline":49},"2024-06-05T17:24:50.381888Z","no","total","none",{"vector":46,"decision":47,"priority":48},"CISAv1\u002FE:N\u002FA:N\u002FT:T\u002FM:H\u002F2026-10-25T11:41:23.993299\u002F","track_star","medium","14D",[],[]]