Lucene search

K
nvd[email protected]NVD:CVE-2013-6027
HistoryOct 19, 2013 - 10:36 a.m.

CVE-2013-6027

2013-10-1910:36:09
CWE-119
web.nvd.nist.gov
3

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.039

Percentile

92.2%

Stack-based buffer overflow in the RuntimeDiagnosticPing function in /bin/webs on D-Link DIR-100 routers might allow remote authenticated administrators to execute arbitrary commands via a long set/runtime/diagnostic/pingIp parameter to Tools/tools_misc.xgi.

Affected configurations

Nvd
Node
dlinkdir-100Match-
VendorProductVersionCPE
dlinkdir-100-cpe:2.3:h:dlink:dir-100:-:*:*:*:*:*:*:*

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.039

Percentile

92.2%

Related for NVD:CVE-2013-6027