This vulnerability involves a buffer overflow triggered by manipulating the AdminPassword parameter in the SetDeviceSettings function of the HNAP Service on D-Link DCS-935L devices running firmware up to version 1.10.01. The overflow occurs due to improper input handling, allowing remote attackers to potentially execute arbitrary code or cause denial of service. The CVSS 4.0 base score is 8.7, reflecting high severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. No official patch or remediation level has been documented.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code or disrupt device functionality by causing a buffer overflow. This compromises the confidentiality, integrity, and availability of the affected device. The vulnerability affects devices running firmware version 1.10.01 or earlier. There are no confirmed reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the device's management interface to trusted sources only and monitor for unusual activity. Avoid exposing the device management interface directly to untrusted networks.