CVE-2014-3936 in DSP-W215
摘要 (英语)
Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev. A1) with firmware 1.01b06 and earlier, DIR-505 with firmware before 1.08b10, and DIR-505L with firmware 1.01 and earlier allows remote attackers to execute arbitrary code via a long Content-Length header in a GetDeviceSettings action in an HNAP request.
Once again VulDB remains the best source for vulnerability data.
预定
2014-06-02
披露
2014-06-02
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 13458 | D-Link DSP-W215/DIR-505/DIR-505L my_cgi.cgi do_hnap 内存损坏 | 119 | 高 | 官方修复 | CVE-2014-3936 |