CVE-2019-17146

The CVE covers a vulnerability in D-Link DCS-960L (v1.07.102) where the HNAP service on port 80 improperly validates the length of user-supplied data in SOAPAction headers, leading to a stack-based overflow and remote code execution as the admin user. Multiple sources (ZDI advisory ZDI-19-1031, N...

CVE-2024-48168

CVE-2024-48168 affects D-Link DCS-960L (firmware 1.09). A stack overflow in the HNAP service, specifically the sub_402280 function, can allow a remote attacker to execute arbitrary code. Exploitation status is not detailed in the provided documents; no in-the-wild exploit link is included. Multip...

CVE-2024-44589

CVE-2024-44589 is a stack-overflow in the Login function of the HNAP service on the D-Link DCS-960L (firmware 1.09) that allows arbitrary code execution. Affected component: HNAP Login handler; root cause: stack overflow. Impact: high (remote code execution). Exploitation details are not provided...