Lucene search
K

5 matches found

CNNVD
CNNVD
added 2024/05/03 12:0 a.m.4 views

D-Link DIR-3040 安全漏洞

The D-Link DIR-3040 is a router from China-based AUO D-Link. It provides the function of connecting to a network. A security vulnerability exists in the D-Link DIR-3040 that stems from a stack-based buffer overflow remote code execution vulnerability in prog.cgi SetUsersSettings...

6.8CVSS7.3AI score0.00705EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/05/02 12:0 a.m.3 views

D-Link DIR-X3260 安全漏洞

D-Link DIR-X3260 is a Wi-Fi 6 router from D-Link, a Chinese company. A security vulnerability exists in the D-Link DIR-X3260 that stems from a stack-based buffer overflow remote code execution vulnerability in prog.cgi SetUsersSettings...

6.8CVSS7.4AI score0.01023EPSS
Exploits0References3
CVE
CVE
added 2024/05/01 11:16 p.m.75 views

CVE-2023-51631

The CVE-2023-51631 issue affects D-Link DIR-X3260 routers, specifically the prog.cgi SetUsersSettings handler. The vulnerability is a stack-based buffer overflow in the prog.cgi binary handling HNAP requests to the lighttpd server (ports 80/443), caused by improper validation of a user-supplied s...

6.8CVSS7.2AI score0.01023EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/05/01 11:16 p.m.22 views

CVE-2023-51631 D-Link DIR-X3260 prog.cgi SetUsersSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DIR-X3260 prog.cgi SetUsersSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerabilit...

6.8CVSS7.3AI score0.01023EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/10/10 12:0 a.m.3 views

The vulnerability of the SetUsersSettings() function in D-Link DIR-3040 wireless router software allows a hacker to execute arbitrary code.

The vulnerability of the SetUsersSettings function in D-Link DIR-3040 wireless router software lies in the fact that the operation’s output escapes the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HNAP requests to...

7.7CVSS7.3AI score0.00705EPSS
Exploits0References3
Rows per page
Query Builder