CVE-2019-17146

The CVE covers a vulnerability in D-Link DCS-960L (v1.07.102) where the HNAP service on port 80 improperly validates the length of user-supplied data in SOAPAction headers, leading to a stack-based overflow and remote code execution as the admin user. Multiple sources (ZDI advisory ZDI-19-1031, N...

CVE-2024-48168

A stack overflow vulnerability exists in the sub_402280 function of the HNAP service on D-Link DCS-960L version 1.09 . The root cause is a boundary error occurring when the service handles untrusted input , which allows a remote attacker to execute arbitrary code . While no specific patch version...

CVE-2024-44589

A stack overflow vulnerability exists in the Login function of the HNAP service on D-Link DCS-960L wireless HD cameras running firmware version 1.09 . A remote attacker can exploit this flaw to execute arbitrary code . As a temporary workaround, it is recommended to disable the Login function in ...