CVE-2018-20305

CVE-2018-20305 affects D-Link DIR-816 A2 with firmware 1.10 B05. The /goform/form2userconfig.cgi handler accepts a long password in the newpass parameter, causing a stack-based buffer overflow that can overwrite a return address and allows arbitrary remote code execution without authentication. N...

CVE-2018-11013

Affected product: D-Link DIR-816 A2 routers running firmware 1.10B05. The vulnerability is a stack-based buffer overflow in the GoAhead websRedirect function that can be triggered by a long HTTP Host header, allowing unauthenticated remote code execution. Multiple sources (CNVD and NVD entries) c...