CVE-2016-1558 Buffer overflow in D-Link DAP-2310 2.06 and earlier, DAP-2330 1.06 and earlier, DAP-2360 2.06 and earlier, DAP-2553 H/W ver. B1 3.05 and earlier, DAP-2660 1.11 and earlier, DAP-2690 3.15 and earlier,....
CriticalCVSS 9.8
EPSS 9.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in D-Link DAP-2310 2.06 and earlier, DAP-2330 1.06 and earlier, DAP-2360 2.06 and earlier, DAP-2553 H/W ver. B1 3.05 and earlier, DAP-2660 1.11 and earlier, DAP-2690 3.15 and earlier, DAP-2695 1.16 and earlier, DAP-3320 1.00 and earlier, and DAP-3662 1.01 and earlier allows remote attackers to have unspecified impact via a crafted 'dlink_uid' cookie.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dlink dap-3662 firmware | = 1.01 | No fix listed |
| dlink dap-2310 firmware | = 2.06 | No fix listed |
| dlink dap-2330 firmware | = 1.06 | No fix listed |
| dlink dap-2360 firmware | = 2.06 | No fix listed |
| dlink dap-2553 firmware | = 3.05 | No fix listed |
| dlink dap-2660 firmware | = 1.11 | No fix listed |
| dlink dap-2690 firmware | = 3.15 | No fix listed |
| dlink dap-2695 firmware | = 1.16 | No fix listed |
| dlink dap-3320 firmware | = 1.00 | No fix listed |
| dlink dap-2230 firmware | = 1.02 | No fix listed |
References
- packetstormsecurity.com broken-link third-party-advisory vdb-entry
- 20160225 D-Link, Netgear Router Vulnerabiltiies mailing-list third-party-advisory
- www.dlink.com patch vendor-advisory