Evil-DB LogoEvil-DB
← All CVEs

CVE-2006-3687

high · 7.5

Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in D-Link DI-524, DI-604 Broadband Router, DI-624, D-Link DI-784, WBR-1310 Wireless G Router, WBR-2310 RangeBooster G Router, and EBR-2310 Ethernet Broadband Router allows remote attackers to execute arbitrary code via a long M-SEARCH request to UDP port 1900.

7.5
CVSS
19.5%
EPSS (exploit prob.)
97th
EPSS percentile
2006-07-21
Published

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

VendorProductAffected versions
d-linkdi-604_broadband_routerall versions
d-linkdi-784all versions
d-linkebr-2310_ethernet_broadband_routerall versions
d-linkwbr-1310_wireless_g_routerall versions
d-linkwbr-2310_rangebooster_g_routerall versions
dlinkdi-524all versions
dlinkdi-624all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2006-3687