Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 6 min 132 bronnen 1 kritiek 3 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2014-3936

HIGH · 10.0 CVSS Gepubliceerd: CWE-119

Beschrijving

Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev. A1) with firmware 1.01b06 and earlier, DIR-505 with firmware before 1.08b10, and DIR-505L with firmware 1.01 and earlier allows remote attackers to execute arbitrary code via a long Content-Length header in a GetDeviceSettings action in an HNAP request.

Vendors

Dlink

Affected products

Dir505 Shareport Mobile Companion Firmware Dir505 Shareport Mobile Companion Dir505l Shareport Mobile Companion Firmware Dir-505l Shareport Mobile Companion Dsp-w215 Firmware Dsp-w215

References