CVE-2012-10021

🗓️ 31 Jul 2025 14:54:19Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 20 Views🌐 WEB

Vulnerability in D-Link DIR-605L allows remote code execution via unsafe CAPTCHA handling

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the getAuthCode() function in D-Link DIR-605L router microprogramming software allows a hacker to execute any code with root privileges.	6 Aug 202500:00	–	bdu_fstec
Circl	CVE-2012-10021	29 May 201815:50	–	circl
CNNVD	D-Link DIR-605L 安全漏洞	31 Jul 202500:00	–	cnnvd
CNVD	AUO DIR-605L Buffer Overflow Vulnerability	10 Aug 202500:00	–	cnvd
Cvelist	CVE-2012-10021 D-Link DIR-605L Captcha Handling Buffer Overflow	31 Jul 202514:54	–	cvelist
EUVD	EUVD-2012-6567	7 Oct 202500:30	–	euvd
NVD	CVE-2012-10021	31 Jul 202515:15	–	nvd
Positive Technologies	PT-2025-31530 · D Link · Dir-605L	8 Oct 201200:00	–	ptsecurity
RedhatCVE	CVE-2012-10021	2 Aug 202520:23	–	redhatcve
Vulnrichment	CVE-2012-10021 D-Link DIR-605L Captcha Handling Buffer Overflow	31 Jul 202514:54	–	vulnrichment

NVD

Vulners

CNA

Node

AND

dlink dir-605l_firmwareRange1.12–1.13

dlink dir-605lMatch-

[
  {
    "defaultStatus": "unknown",
    "modules": [
      "/goform/formLogin"
    ],
    "product": "DIR-605L",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThanOrEqual": "1.13",
        "status": "affected",
        "version": "1.12",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
forums	www.forums.dlink.com/index.php
web	www.web.archive.org/web/20121012062554/http://www.devttys0.com/2012/10/exploiting-a-mips-stack-overflow/
vulncheck	www.vulncheck.com/advisories/dlink-dir605l-captcha-handling-stack-based-buffer-overflow
exploit-db	www.exploit-db.com/exploits/29127
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/dlink_dir605l_captcha_bof.rb

Parameter	Position	Path	Description	CWE
FILECODE	request body	/goform/formLogin	Stack-based buffer overflow in getAuthCode() processing CAPTCHA data via FILECODE parameter in /goform/formLogin; enables remote unauthenticated code execution with root privileges.	CWE-121

16 Jun 2026 23:38Current

8.1High risk

Vulners AI Score8.1

CVSS 3.19.8

CVSS 49.3

EPSS0.03086

SSVC

CWE-121