A security flaw has been discovered in D-Link DI-8400 16.07. This affects the function ddns_asp of the file /ddns.asp of the component DDNS Configuration. Performing a manipulation of the argument serv/user/host/wild/mx/bmx/cust/ip results in stack-based buffer overflow. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.

A stack-based buffer overflow vulnerability has been discovered in D-Link DI-8400 firmware version 16.07. The flaw exists in the ddns_asp function within the /ddns.asp file, part of the DDNS Configuration component. Attackers can exploit this vulnerability by manipulating arguments such as serv, user, host, wild, mx, bmx, cust, or ip to trigger the overflow. The attack can be initiated remotely without requiring physical access to the device. A public exploit has already been released, significantly increasing the risk of active exploitation. The vulnerability is classified as a stack-based buffer overflow, which can potentially allow arbitrary code execution. D-Link DI-8400 is a networking device, making this vulnerability particularly concerning for network infrastructure security. The availability of a public proof-of-concept exploit raises the urgency for patching or mitigation. Users of the affected firmware version should apply any available patches or workarounds immediately.