EUVD-2014-9810

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Stack-based buffer overflow in D-Link devices allows remote code execution via crafted HTTP POST request

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2014-125117	29 May 201815:50	–	circl
CNNVD	D-Link DSP-W215 安全漏洞	25 Jul 202500:00	–	cnnvd
CVE	CVE-2014-125117	25 Jul 202515:50	–	cve
Cvelist	CVE-2014-125117 D-Link info.cgi POST Request Stack-Based Buffer Overflow RCE	25 Jul 202515:50	–	cvelist
NVD	CVE-2014-125117	25 Jul 202516:15	–	nvd
Positive Technologies	PT-2025-31208 · Undefined · Undefined	25 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2014-125117	27 Jul 202516:14	–	redhatcve
Vulnrichment	CVE-2014-125117 D-Link info.cgi POST Request Stack-Based Buffer Overflow RCE	25 Jul 202515:50	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "e9a651d7-255f-336a-ac99-f4951a001689",
        "vendor": {
          "name": "D-Link"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "a8778598-a91c-3b14-8584-6a8318cb4da0",
        "product": {
          "name": "DSP-W215"
        },
        "product_version": "1.02"
      }
    ]
  }
]

Source	Link
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/dlink_dspw215_info_cgi_bof.rb
exploit-db	www.exploit-db.com/exploits/34063
web	www.web.archive.org/web/20140525215526/http://www.devttys0.com/2014/05/hacking-the-dspw215-again/
fortiguard	www.fortiguard.com/encyclopedia/ips/38932/d-link-info-cgi-post-request-buffer-overflow
vulncheck	www.vulncheck.com/advisories/dlink-stack-based-buffer-overflow-rce
nvd	www.nvd.nist.gov/vuln/detail/CVE-2014-125117
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.4Medium risk

Vulners AI Score6.4

CVSS 49.3

CVSS 3.19.8

EPSS0.62546

SSVC