Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-21665
HistoryFeb 07, 2023 - 12:00 a.m.

D-Link DIR-825 Buffer Overflow Vulnerability (CNVD-2023-21665)

2023-02-0700:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
d-link
router
buffer overflow
vulnerability
chinese company
boundary error
untrusted input
arbitrary code
/cpe endpoint
getconfig method

0.003 Low

EPSS

Percentile

66.2%

D-Link DIR-825 is a router from D-Link, a Chinese company. D-Link DIR-825 v1.33.0.44ebdd4-embedded and previous versions are vulnerable to a buffer overflow vulnerability, which is caused by a boundary error when handling untrusted input, and can be exploited to execute arbitrary code against the /CPE endpoint via the GetConfig method to execute arbitrary code on the /CPE endpoint.

0.003 Low

EPSS

Percentile

66.2%

Related for CNVD-2023-21665