Lucene search

K
cveCertccCVE-2013-6027
HistoryOct 19, 2013 - 10:36 a.m.

CVE-2013-6027

2013-10-1910:36:09
CWE-119
certcc
web.nvd.nist.gov
22
cve-2013-6027
buffer overflow
runtimediagnosticping
d-link dir-100
remote code execution
nvd

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.039

Percentile

92.2%

Stack-based buffer overflow in the RuntimeDiagnosticPing function in /bin/webs on D-Link DIR-100 routers might allow remote authenticated administrators to execute arbitrary commands via a long set/runtime/diagnostic/pingIp parameter to Tools/tools_misc.xgi.

Affected configurations

Nvd
Node
dlinkdir-100Match-
VendorProductVersionCPE
dlinkdir-100-cpe:2.3:h:dlink:dir-100:-:*:*:*:*:*:*:*

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.039

Percentile

92.2%

Related for CVE-2013-6027