CVEvulnerability

CVE-2014-3936

10.0 HIGH Published 2014-06-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-06-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev. A1) with firmware 1.01b06 and earlier, DIR-505 with firmware before 1.08b10, and DIR-505L with firmware 1.01 and earlier allows remote attackers to execute arbitrary code via a long Content-Length header in a GetDeviceSettings action in an HNAP request.

Affected configurations

• dlink dir505 shareport mobile companion firmware (<= 1.07) • dlink dir505 shareport mobile companion a1 • dlink dir505l shareport mobile companion firmware (<= 1.01) • dlink dir-505l shareport mobile companion a1 • dlink dsp-w215 firmware (<= 1.01) • dlink dsp-w215 a1

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References