CVE-2018-10713

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'read' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'read ' function and cause memory corruption. Furthermore, it is possible to redirect the flow of...

CVE-2018-10713

Affected product: D-Link DSL-3782 EU 1.01. Vulnerability: in Diagnostics component, authenticated users can pass a long buffer to /userfs/bin/tcapi via the read function, triggering a memory corruption (buffer overflow) that can redirect program flow and allow arbitrary code execution. Connected...