A critical buffer overflow vulnerability in the D-Link DI-7100G router allows unauthenticated remote attackers to potentially achieve arbitrary code execution or cause a system crash.

The vulnerability exists within the sub_451754 function of the jhttpd service. An unauthenticated attacker can send a crafted request containing a malicious payload via the viav4 parameter to trigger a buffer overflow.

The ability for an unauthenticated remote attacker to execute arbitrary code or cause a denial of service poses a severe risk to network integrity and availability. With a CVSS score of 7.5, this flaw represents a High severity risk, potentially allowing an adversary to compromise the gateway device, intercept traffic, or render the network infrastructure unusable for the organization.

Immediate Action: Review the official D-Link security portal for firmware updates addressing this buffer overflow and apply them immediately. If no patch is available, restrict access to the device management interface to trusted internal segments only.

Proactive Monitoring: Monitor network traffic for anomalous HTTP requests directed at the DI-7100G device, specifically looking for unusually long or malformed strings within URL parameters.

Compensating Controls: Deploy a Web Application Firewall or an Intrusion Prevention System to detect and block traffic patterns associated with buffer overflow attempts targeting the jhttpd service.

Public Exploit Available: Yes, a public proof-of-concept exists as referenced in the researcher write-up on GitHub.

Given the availability of a proof-of-concept and the potential for remote code execution, this vulnerability requires immediate attention. Organizations utilizing the D-Link DI-7100G must prioritize patching or isolating these devices from the public internet to prevent unauthorized access and potential system compromise.