EUVD-2012-6567

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Stack-based buffer overflow in D-Link DIR-605L Router allows remote code execution via getAuthCode function

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the getAuthCode() function in D-Link DIR-605L router microprogramming software allows a hacker to execute any code with root privileges.	6 Aug 202500:00	–	bdu_fstec
Circl	CVE-2012-10021	29 May 201815:50	–	circl
CNNVD	D-Link DIR-605L 安全漏洞	31 Jul 202500:00	–	cnnvd
CNVD	AUO DIR-605L Buffer Overflow Vulnerability	10 Aug 202500:00	–	cnvd
CVE	CVE-2012-10021	31 Jul 202514:54	–	cve
Cvelist	CVE-2012-10021 D-Link DIR-605L Captcha Handling Buffer Overflow	31 Jul 202514:54	–	cvelist
NVD	CVE-2012-10021	31 Jul 202515:15	–	nvd
Positive Technologies	PT-2025-31530 · D Link · Dir-605L	8 Oct 201200:00	–	ptsecurity
RedhatCVE	CVE-2012-10021	2 Aug 202520:23	–	redhatcve
Vulnrichment	CVE-2012-10021 D-Link DIR-605L Captcha Handling Buffer Overflow	31 Jul 202514:54	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "8a086a9e-e476-3727-9f28-045ab92aa41f",
        "vendor": {
          "name": "D-Link"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "5a78e1d5-5173-33a8-8e15-0c45843ff313",
        "product": {
          "name": "DIR-605L"
        },
        "product_version": "1.12 ≤1.13"
      }
    ]
  }
]

Source	Link
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/dlink_dir605l_captcha_bof.rb
web	www.web.archive.org/web/20121012062554/http://www.devttys0.com/2012/10/exploiting-a-mips-stack-overflow/
exploit-db	www.exploit-db.com/exploits/29127
forums	www.forums.dlink.com/index.php
vulncheck	www.vulncheck.com/advisories/dlink-dir605l-captcha-handling-stack-based-buffer-overflow
nvd	www.nvd.nist.gov/vuln/detail/CVE-2012-10021
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.4Medium risk

Vulners AI Score6.4

CVSS 49.3

CVSS 3.19.8

EPSS0.02958

SSVC