D-Link DAP-1330 1.13B01 BETA HNAP_AUTH HTTP Header buffer overflow

Summaryinfo

A vulnerability, which was classified as critical, has been found in D-Link DAP-1330 1.13B01 BETA. Affected by this issue is some unknown functionality of the component HNAP_AUTH HTTP Header Handler. This manipulation causes buffer overflow. This vulnerability is registered as CVE-2021-34829. The attack requires access to the local network. No exploit is available.

Detailsinfo

A vulnerability classified as critical was found in D-Link DAP-1330 1.13B01 BETA. Affected by this vulnerability is an unknown functionality of the component HNAP_AUTH HTTP Header Handler. The manipulation with an unknown input leads to a buffer overflow vulnerability. The CWE definition for the vulnerability is CWE-120. The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow. As an impact it is known to affect confidentiality, integrity, and availability.

The weakness was published 07/16/2021. It is possible to read the advisory at zerodayinitiative.com. This vulnerability is known as CVE-2021-34829. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 07/16/2021).

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• D-Link

Name

• DAP-1330

Version

• 1.13B01 BETA

License

• commercial

Website

• Vendor: https://www.dlink.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Duplicate

• Submit #XXXXXX: X-xxxx Xxx-xxxx X.xx_xxx Xxxx-xxxxx Xxxxxx Xxxxxxxx (by hand_king)

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion