VulnerabilityModified
CVE-2014-3936
Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev.
HIGH 10.0EPSS 76.6%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 76.6%, higher than 100% of all known CVEs. Patch or mitigate before the next change window.
Description
Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev. A1) with firmware 1.01b06 and earlier, DIR-505 with firmware before 1.08b10, and DIR-505L with firmware 1.01 and earlier allows remote attackers to execute arbitrary code via a long Content-Length header in a GetDeviceSettings action in an HNAP request.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 76.55% probability · 100th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- dlink/dir505 shareport mobile companion firmware · dlink/dir505 shareport mobile companion · dlink/dir505l shareport mobile companion firmware · dlink/dir-505l shareport mobile companion · dlink/dsp-w215 firmware · dlink/dsp-w215
- Source
- cve@mitre.org
References
- http://packetstormsecurity.com/files/127427/D-Link-HNAP-Request-Remote-Buffer-Overflow.htmlExploit
- http://secunia.com/advisories/58728
- http://secunia.com/advisories/58972
- http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10027Vendor Advisory
- http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10029Vendor Advisory
- http://www.devttys0.com/2014/05/hacking-the-d-link-dsp-w215-smart-plugExploit
- http://www.securityfocus.com/bid/67651Exploit
- http://packetstormsecurity.com/files/127427/D-Link-HNAP-Request-Remote-Buffer-Overflow.htmlExploit
- http://secunia.com/advisories/58728
- http://secunia.com/advisories/58972
- http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10027Vendor Advisory
- http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10029Vendor Advisory
- http://www.devttys0.com/2014/05/hacking-the-d-link-dsp-w215-smart-plugExploit
- http://www.securityfocus.com/bid/67651Exploit
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.