Adjacent remote code execution via DDP password overflow

Stack-based buffer overflow in the DDP service in D-Link DAP-2622 firmware 1.00 and earlier allows remote attackers to execute code as root. The firmware-upgrade handler copies an attacker-controlled authentication password into a fixed-length stack buffer without first validating its length. Exploitation requires adjacent-network access but no authentication or user interaction, and successful exploitation grants root-level control of the access point.