CVE-2023-45574

CVE-2023-45574 is a critical buffer overflow vulnerability affecting multiple D-Link DI-7xxx series router models, specifically in firmware versions prior to or including 23.08.25D1 or 23.08.23D1/E1. This flaw allows a remote, unauthenticated attacker to execute arbitrary code by manipulating the 'fn' parameter within the 'file.data' function. With a CVSS score of 9.8 (Critical), it presents a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.