CVE-2016-6563 D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login action

2018-07-1320:00:00

CWE-121

certcc

www.cve.org

9.6 High

AI Score

Confidence

High

0.967 High

EPSS

Percentile

99.7%

JSON

Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action, Username, LoginPassword, and Captcha. The following products are affected: DIR-823, DIR-822, DIR-818L(W), DIR-895L, DIR-890L, DIR-885L, DIR-880L, DIR-868L, and DIR-850L.

CNA Affected

[
  {
    "product": "DIR-823",
    "vendor": "D-Link",
    "versions": [
      {
        "status": "unknown",
        "version": "N/A"
      }
    ]
  },
  {
    "product": "DIR-822",
    "vendor": "D-Link",
    "versions": [
      {
        "status": "unknown",
        "version": "N/A"
      }
    ]
  },
  {
    "product": "DIR-818L(W)",
    "vendor": "D-Link",
    "versions": [
      {
        "status": "unknown",
        "version": "N/A"
      }
    ]
  },
  {
    "product": "DIR-895L",
    "vendor": "D-Link",
    "versions": [
      {
        "status": "unknown",
        "version": "N/A"
      }
    ]
  },
  {
    "product": "DIR-890L",
    "vendor": "D-Link",
    "versions": [
      {
        "status": "unknown",
        "version": "N/A"
      }
    ]
  },
  {
    "product": "DIR-885L",
    "vendor": "D-Link",
    "versions": [
      {
        "status": "unknown",
        "version": "N/A"
      }
    ]
  },
  {
    "product": "DIR-880L",
    "vendor": "D-Link",
    "versions": [
      {
        "status": "unknown",
        "version": "N/A"
      }
    ]
  },
  {
    "product": "DIR-868L",
    "vendor": "D-Link",
    "versions": [
      {
        "status": "unknown",
        "version": "N/A"
      }
    ]
  },
  {
    "product": "DIR-850L",
    "vendor": "D-Link",
    "versions": [
      {
        "status": "unknown",
        "version": "N/A"
      }
    ]
  }
]