← Back

CVE-2016-6563

nvd nist
Published: Jul 13, 2018Modified: Nov 21, 2024

JSON object

Loading...
9.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action, Username, LoginPassword, and Captcha. The following products are affected: DIR-823, DIR-822, DIR-818L(W), DIR-895L, DIR-890L, DIR-885L, DIR-880L, DIR-868L, and DIR-850L.

Affected (9)

Dlink
9 products
Dir 823 Firmware
Dir 822 Firmware
Dir 818l(w) Firmware
Dir 895l Firmware
Dir 890l Firmware
Dir 885l Firmware
Dir 880l Firmware
Dir 868l Firmware
Dir 850l Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dir 823 Firmware
All versions
Running on/withPlatform Versions
Dlink
Dir 823
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dir 822 Firmware
All versions
Running on/withPlatform Versions
Dlink
Dir 822
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dir 818l(w) Firmware
All versions
Running on/withPlatform Versions
Dlink
Dir 818l(w)
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dir 895l Firmware
All versions
Running on/withPlatform Versions
Dlink
Dir 895l
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dir 890l Firmware
All versions
Running on/withPlatform Versions
Dlink
Dir 890l
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dir 885l Firmware
All versions
Running on/withPlatform Versions
Dlink
Dir 885l
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dir 880l Firmware
All versions
Running on/withPlatform Versions
Dlink
Dir 880l
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dir 868l Firmware
All versions
Running on/withPlatform Versions
Dlink
Dir 868l
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dir 850l Firmware
All versions
Running on/withPlatform Versions
Dlink
Dir 850l
All versions

Related CWEs

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CWE-121
Stack-based Buffer Overflow
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

References (8)

Source: cret@cert.org
ExploitMailing ListThird Party Advisory
Source: cret@cert.org
Third Party AdvisoryVDB Entry
Source: cret@cert.org
ExploitThird Party AdvisoryVDB Entry
Source: cret@cert.org
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitMailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource

Timeline

No history available yet.