CVE-2017-14948

Published: Oct 14, 2019Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Certain D-Link products are affected by: Buffer Overflow. This affects DIR-880L 1.08B04 and DIR-895 L/R 1.13b03. The impact is: execute arbitrary code (remote). The component is: htdocs/fileaccess.cgi. The attack vector is: A crafted HTTP request handled by fileacces.cgi could allow an attacker to mount a ROP attack: if the HTTP header field CONTENT_TYPE starts with ''boundary=' followed by more than 256 characters, a buffer overflow would be triggered, potentially causing code execution.

Affected (6)

Products: Dlink: Dir 868l Firmware, Dir 890l Firmware, Dir 885l Firmware, Dir 895l Firmware, Dir 880l Firmware, Dir 895r Firmware

6 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 868l Firmware	All versions

Running on/with	Platform Versions
Dlink Dir 868l	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 890l Firmware	All versions

Running on/with	Platform Versions
Dlink Dir 890l	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 885l Firmware	All versions

Running on/with	Platform Versions
Dlink Dir 885l	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 895l Firmware	Version 1.13b03

Running on/with	Platform Versions
Dlink Dir 895l	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 880l Firmware	Version 1.08b04

Running on/with	Platform Versions
Dlink Dir 880l	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dir 895r Firmware	Version 1.13b03

Running on/with	Platform Versions
Dlink Dir 895r	All versions

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (2)

https://github.com/badnack/d_link_880_bug/blob/master/README.md

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/badnack/d_link_880_bug/blob/master/README.md

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.