CVE-2014-4927 Buffer overflow in ACME micro_httpd, as used in D-Link DSL2750U and DSL2740U and NetGear WGR614 and MR-ADSL-DG834 routers allows remote attackers to cause a denial of service (crash) via a long string...
HighCVSS 7.8
EPSS 11.2%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Buffer overflow in ACME micro_httpd, as used in D-Link DSL2750U and DSL2740U and NetGear WGR614 and MR-ADSL-DG834 routers allows remote attackers to cause a denial of service (crash) via a long string in the URI in a GET request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| acme micro httpd | All versions | No fix listed |
| dlink dsl2740u | All versions | No fix listed |
| dlink dsl2750u | All versions | No fix listed |
| netgear mr-adsl-dg834 | All versions | No fix listed |
| netgear wgr614 | = v1 | No fix listed |
| netgear wgr614 | = v2 | No fix listed |
| netgear wgr614 | = v3 | No fix listed |
| netgear wgr614 | = v4 | No fix listed |
| netgear wgr614 | = v5 | No fix listed |
| netgear wgr614 | = v6 | No fix listed |
| netgear wgr614 | = v7 | No fix listed |
| netgear wgr614 | = v8 | No fix listed |
| netgear wgr614 | = v9 | No fix listed |
| ubuntu/micro-httpd(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/micro-httpd(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/micro-httpd(Ubuntu:26.10) | All versions | No fix listed |
| ubuntu/micro-httpd(Ubuntu:22.04) | All versions | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- 109356 vdb-entry
- packetstormsecurity.com exploit
- 34102 exploit
- 68746 exploit vdb-entry