CVE-2022-40718 | D-Link DIR-2150 anweb websocket_data_handler stack-based overflow (ZDI-22-1221 / EUVD-2022-43987)

A vulnerability has been found in . Affected by this issue is the function websocket_data_handler of the component anweb. This manipulation causes stack-based buffer overflow.

This vulnerability appears as CVE-2022-40718. The attacker needs to be present on the local network. There is no available exploit.

The affected component should be upgraded.