CVE-2016-6563

🗓️ 13 Jul 2018 20:00:00Reported by certccType

cve🔗 web.nvd.nist.gov👁 181 Views🌐 WEB

CVE-2016-6563 D-Link DIR routers buffer overflow vulnerabilit

Reporter	Title	Published	Views	Family All 12
zdt	DLink DIR Routers HNAP Login Stack Buffer Overflow Vulnerability	9 Nov 201600:00	–	zdt
zdt	Dlink DIR Routers - Unauthenticated HNAP Login Stack Buffer Overflow (Metasploit) Exploit	23 Nov 201600:00	–	zdt
Circl	CVE-2016-6563	8 Nov 201609:19	–	circl
Cvelist	CVE-2016-6563 D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login action	13 Jul 201820:00	–	cvelist
Exploit DB	D-Link DIR-Series Routers - HNAP Login Stack Buffer Overflow (Metasploit)	21 Nov 201600:00	–	exploitdb
Metasploit	Dlink DIR Routers Unauthenticated HNAP Login Stack Buffer Overflow	7 Nov 201600:00	–	metasploit
NVD	CVE-2016-6563	13 Jul 201820:29	–	nvd
OpenVAS	D-Link DIR Routers HNAP Buffer Overflow Vulnerability (SAP10066)	14 Feb 201700:00	–	openvas
Packet Storm	Dlink DIR Routers Unauthenticated HNAP Login Stack Buffer Overflow	21 Nov 201600:00	–	packetstorm
Prion	Buffer overflow	13 Jul 201820:29	–	prion

NVD

Node

AND

dlink dir-823_firmwareMatch-

dlink dir-823Match-

Node

AND

dlink dir-822_firmwareMatch-

dlink dir-822Match-

Node

AND

dlink dir-818l(w)_firmwareMatch-

dlink dir-818l(w)Match-

Node

AND

dlink dir-895l_firmwareMatch-

dlink dir-895lMatch-

Node

AND

dlink dir-890l_firmwareMatch-

dlink dir-890lMatch-

Node

AND

dlink dir-885l_firmwareMatch-

dlink dir-885lMatch-

Node

AND

dlink dir-880l_firmwareMatch-

dlink dir-880lMatch-

Node

AND

dlink dir-868l_firmwareMatch-

dlink dir-868lMatch-

Node

AND

dlink dir-850l_firmwareMatch-

dlink dir-850lMatch-

[
  {
    "product": "DIR-823",
    "vendor": "D-Link",
    "versions": [
      {
        "status": "unknown",
        "version": "N/A"
      }
    ]
  },
  {
    "product": "DIR-822",
    "vendor": "D-Link",
    "versions": [
      {
        "status": "unknown",
        "version": "N/A"
      }
    ]
  },
  {
    "product": "DIR-818L(W)",
    "vendor": "D-Link",
    "versions": [
      {
        "status": "unknown",
        "version": "N/A"
      }
    ]
  },
  {
    "product": "DIR-895L",
    "vendor": "D-Link",
    "versions": [
      {
        "status": "unknown",
        "version": "N/A"
      }
    ]
  },
  {
    "product": "DIR-890L",
    "vendor": "D-Link",
    "versions": [
      {
        "status": "unknown",
        "version": "N/A"
      }
    ]
  },
  {
    "product": "DIR-885L",
    "vendor": "D-Link",
    "versions": [
      {
        "status": "unknown",
        "version": "N/A"
      }
    ]
  },
  {
    "product": "DIR-880L",
    "vendor": "D-Link",
    "versions": [
      {
        "status": "unknown",
        "version": "N/A"
      }
    ]
  },
  {
    "product": "DIR-868L",
    "vendor": "D-Link",
    "versions": [
      {
        "status": "unknown",
        "version": "N/A"
      }
    ]
  },
  {
    "product": "DIR-850L",
    "vendor": "D-Link",
    "versions": [
      {
        "status": "unknown",
        "version": "N/A"
      }
    ]
  }
]

Source	Link
seclists	www.seclists.org/fulldisclosure/2016/Nov/38
securityfocus	www.securityfocus.com/bid/94130
kb	www.kb.cert.org/vuls/id/677427
exploit-db	www.exploit-db.com/exploits/40805/

Parameter	Position	Path	Description	CWE
Captcha	request body	/HNAP1/	Pre-authentication stack buffer overflow via oversized SOAP XML fields in HNAP1/Login on D-Link DIR routers.	CWE-119, CWE-121
Action	request body	/HNAP1/	Pre-authentication stack buffer overflow via oversized SOAP XML fields in HNAP1/Login on D-Link DIR routers.	CWE-119, CWE-121
Username	request body	/HNAP1/	Pre-authentication stack buffer overflow via oversized SOAP XML fields in HNAP1/Login on D-Link DIR routers.	CWE-119, CWE-121
LoginPassword	request body	/HNAP1/	Pre-authentication stack buffer overflow via oversized SOAP XML fields in HNAP1/Login on D-Link DIR routers.	CWE-119, CWE-121

17 Jun 2026 00:51Current

9.8High risk

Vulners AI Score9.8

CVSS 39.8

CVSS 210

EPSS0.79947