CVE-2014-125117

🗓️ 25 Jul 2025 15:50:39Reported by VulnCheckType

Stack-based buffer overflow in D-Link my_cgi.cgi allows remote code execution via POST request

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2014-125117	29 May 201815:50	–	circl
CNNVD	D-Link DSP-W215 安全漏洞	25 Jul 202500:00	–	cnnvd
Cvelist	CVE-2014-125117 D-Link info.cgi POST Request Stack-Based Buffer Overflow RCE	25 Jul 202515:50	–	cvelist
EUVD	EUVD-2014-9810	7 Oct 202500:30	–	euvd
NVD	CVE-2014-125117	25 Jul 202516:15	–	nvd
Positive Technologies	PT-2025-31208 · Undefined · Undefined	25 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2014-125117	27 Jul 202516:14	–	redhatcve
Vulnrichment	CVE-2014-125117 D-Link info.cgi POST Request Stack-Based Buffer Overflow RCE	25 Jul 202515:50	–	vulnrichment

NVD

Vulners

CNA

Node

dlink dsp-w215_firmwareMatch1.02

AND

dlink dsp-w215Match-

[
  {
    "defaultStatus": "unknown",
    "modules": [
      "/common/info.cgi",
      "my_cgi.cgi"
    ],
    "product": "DSP-W215",
    "vendor": "D-Link",
    "versions": [
      {
        "status": "affected",
        "version": "1.02"
      }
    ]
  }
]

Source	Link
web	www.web.archive.org/web/20140525215526/http://www.devttys0.com/2014/05/hacking-the-dspw215-again/
exploit-db	www.exploit-db.com/exploits/34063
fortiguard	www.fortiguard.com/encyclopedia/ips/38932/d-link-info-cgi-post-request-buffer-overflow
vulncheck	www.vulncheck.com/advisories/dlink-stack-based-buffer-overflow-rce
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/dlink_dspw215_info_cgi_bof.rb

07 Apr 2026 14:03Current

7.8High risk

Vulners AI Score7.8

CVSS 3.19.8

CVSS 49.3

EPSS0.62546

SSVC