CVE-2014-3936 Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev. A1) with firmware 1.01b06 and earlier, DIR-505 with firmware before 1.08b10, and DIR-505L with firmware 1...
HighCVSS 10.0
EPSS 76.6%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev. A1) with firmware 1.01b06 and earlier, DIR-505 with firmware before 1.08b10, and DIR-505L with firmware 1.01 and earlier allows remote attackers to execute arbitrary code via a long Content-Length header in a GetDeviceSettings action in an HNAP request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dlink dir505 shareport mobile companion firmware | <= 1.07 | No fix listed |
| dlink dir505 shareport mobile companion | = a1 | No fix listed |
| dlink dir505l shareport mobile companion firmware | <= 1.01 | No fix listed |
| dlink dir-505l shareport mobile companion | = a1 | No fix listed |
| dlink dsp-w215 firmware | <= 1.01 | No fix listed |
| dlink dsp-w215 | = a1 | No fix listed |
References
- packetstormsecurity.com exploit
- 58728 third-party-advisory
- 58972 third-party-advisory
- securityadvisories.dlink.com vendor-advisory
- securityadvisories.dlink.com vendor-advisory
- www.devttys0.com exploit
- 67651 exploit vdb-entry