CVE-2016-6563
D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login action
CRITICAL 9.8EPSS 79.7%
Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action, Username, LoginPassword, and Captcha. The following products are affected: DIR-823, DIR-822, DIR-818L(W), DIR-895L, DIR-890L, DIR-885L, DIR-880L, DIR-868L, and DIR-850L.
- Affected
- D-Link · DIR-823 · DIR-822 · DIR-818L(W) · DIR-895L · DIR-890L · DIR-885L
- CVSS v3.0 NVD
- 9.8 CRITICAL
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 10.0 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 79.73% chance of exploitation in the next 30 days, 100th percentile
- Published
- 2018-07-13
- Updated
- 2024-08-06