| タイトル | D-Link DIR816 1.10CNB05 Stack-based Buffer Overflow |
|---|
| 説明 | We found an stack overflow vulnerability in D-Link router with firmware which was released recently, allows remote attackers to crash the server.（without authentication）In the router's form2Wl5RepeaterStep2.cgi function, key1、key2、key3、key4、pskValue is directly passed by the attacker, If this part of the data is too long, it will cause the stack overflow, so we can control the key1、key2、key3、key4、pskValue to execute arbitrary code. |
|---|
| ソース | ⚠️ https://github.com/wudipjq/my_vuln/blob/main/D-Link7/vuln_86/86.md |
|---|
| ユーザー | pjqwudi (UID 85106) |
|---|
| 送信 | 2026年03月02日 09:22 (7 月 ago) |
|---|
| モデレーション | 2026年03月14日 22:57 (13 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 351086 [D-Link DIR-816 1.10CNB05 goahead form2Wl5RepeaterStep2.cgi key1/key2/key3/key4/pskValue メモリ破損] |
|---|
| ポイント | 20 |
|---|