CVE-2016-1558

N/A

Descricao

Buffer overflow in D-Link DAP-2310 2.06 and earlier, DAP-2330 1.06 and earlier, DAP-2360 2.06 and earlier, DAP-2553 H/W ver. B1 3.05 and earlier, DAP-2660 1.11 and earlier, DAP-2690 3.15 and earlier, DAP-2695 1.16 and earlier, DAP-3320 1.00 and earlier, and DAP-3662 1.01 and earlier allows remote attackers to have unspecified impact via a crafted 'dlink_uid' cookie.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado4/21/2017

Ultima modificacao4/20/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

dlink:dap-2230dlink:dap-2230_firmwaredlink:dap-2310dlink:dap-2310_firmwaredlink:dap-2330dlink:dap-2330_firmwaredlink:dap-2360dlink:dap-2360_firmwaredlink:dap-2553dlink:dap-2553_firmwaredlink:dap-2660dlink:dap-2660_firmwaredlink:dap-2690dlink:dap-2690_firmwaredlink:dap-2695dlink:dap-2695_firmwaredlink:dap-3320dlink:dap-3320_firmwaredlink:dap-3662dlink:dap-3662_firmware

Fraquezas (CWE)

CWE-119

Referencias

http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html(cret@cert.org)

http://seclists.org/fulldisclosure/2016/Feb/112(cret@cert.org)

http://www.dlink.com/mk/mk/support/support-news/2016/march/16/firmadyne-cve_2016_1558-cve_2016_1559(cret@cert.org)

http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/fulldisclosure/2016/Feb/112(af854a3a-2127-422b-91ae-364da2661108)

http://www.dlink.com/mk/mk/support/support-news/2016/march/16/firmadyne-cve_2016_1558-cve_2016_1559(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.