Memory corruption

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'get' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'get ' function and cause memory corruption. Furthermore, it is possible to redirect the flow of t...

CVE-2018-10746

CVE-2018-10746 affects the D-Link DSL-3782 EU 1.01 router. The vulnerability resides in the Diagnostics component: an authenticated user can pass a long buffer as the ‘get ’ parameter to the /userfs/bin/tcapi binary, leading to memory corruption and enabling potential arbitrary code execution by ...

Memory corruption

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'read' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'read ' function and cause memory corruption. Furthermore, it is possible to redirect the flow of...