| Title | D-Link DIR816 1.10CNB05 Stack-based Buffer Overflow |
|---|
| Description | We found an stack overflow vulnerability in D-Link router with firmware which was released recently, allows remote attackers to crash the server.（without authentication）In the router's form2Wl5RepeaterStep2.cgi function, key1、key2、key3、key4、pskValue is directly passed by the attacker, If this part of the data is too long, it will cause the stack overflow, so we can control the key1、key2、key3、key4、pskValue to execute arbitrary code. |
|---|
| Source | ⚠️ https://github.com/wudipjq/my_vuln/blob/main/D-Link7/vuln_86/86.md |
|---|
| User | pjqwudi (UID 85106) |
|---|
| Submission | 03/02/2026 09:22 (1 month ago) |
|---|
| Moderation | 03/14/2026 22:57 (13 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 351086 [D-Link DIR-816 1.10CNB05 goahead form2Wl5RepeaterStep2.cgi key1/key2/key3/key4/pskValue stack-based overflow] |
|---|
| Points | 20 |
|---|