Description
Multiple D-Link devices including the DIR-850L firmware versions 1.14B07 and 2.07.B05 contain a stack-based buffer overflow vulnerability in the web administration interface HNAP service.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
D-Link DIR-850L and potentially others
1.14B07affected2.07.B05affected
References
- https://www.kb.cert.org/vuls/id/305448 ↗
- https://twitter.com/NCCGroupInfosec/status/845269159277723649 ↗
- https://www.nccgroup.trust/uk/our-research/d-link-dir-850l-web-admin-interface-vulnerable-to-stack-based-buffer-overflow/?research=Technical+advisories ↗
- http://www.securityfocus.com/bid/96747 ↗
- https://tools.cisco.com/security/center/viewAlert.x?alertId=52967 ↗