A weakness has been identified in D-Link DI-8100 16.07.26A1. Affected is the function sprintf of the file /auto_reboot.asp of the component HTTP Handler. This m…

A buffer overflow vulnerability has been identified in D-Link DI-8100 router firmware version 16.07.26A1. The vulnerability affects the sprintf function in the /auto_reboot.asp file within the HTTP Handler component. Attackers can exploit this by manipulating the enable/time arguments, causing a buffer overflow condition. The vulnerability can be exploited remotely, making it particularly dangerous. Public exploits are already available, increasing the risk of active exploitation. This affects the device's web management interface and could potentially allow remote code execution.