Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-94723
HistoryDec 04, 2021 - 12:00 a.m.

D-Link DIR-809 formWlanSetup buffer overflow vulnerability

2021-12-0400:00:00
China National Vulnerability Database
www.cnvd.org.cn
7

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

A buffer overflow vulnerability exists in the D-Link DIR-809, a dual-band router from D-Link (China), which stems from the failure of the FUN_80040af8 function in the product/formWlanSetup link to effectively determine data boundaries. An attacker could cause a buffer overflow resulting in a denial of service or code execution via a POST request.

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

Related for CNVD-2021-94723