CVE-2016-6563
critical · 9.8Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action, Username, LoginPassword, and Captcha. The following products are affected: DIR-823, DIR-822, DIR-818L(W), DIR-895L, DIR-890L, DIR-885L, DIR-880L, DIR-868L, and DIR-850L.
9.8
CVSS
79.7%
EPSS (exploit prob.)
100th
EPSS percentile
2018-07-13
Published
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-121CWE-119
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| dlink | dir-823_firmware | all versions |
| dlink | dir-823 | all versions |
| dlink | dir-822_firmware | all versions |
| dlink | dir-822 | all versions |
| dlink | dir-818l(w)_firmware | all versions |
| dlink | dir-818l(w) | all versions |
| dlink | dir-895l_firmware | all versions |
| dlink | dir-895l | all versions |
| dlink | dir-890l_firmware | all versions |
| dlink | dir-890l | all versions |
| dlink | dir-885l_firmware | all versions |
| dlink | dir-885l | all versions |
| dlink | dir-880l_firmware | all versions |
| dlink | dir-880l | all versions |
| dlink | dir-868l_firmware | all versions |
| dlink | dir-868l | all versions |
| dlink | dir-850l_firmware | all versions |
| dlink | dir-850l | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://seclists.org/fulldisclosure/2016/Nov/38
- http://www.securityfocus.com/bid/94130
- https://www.exploit-db.com/exploits/40805/
- https://www.kb.cert.org/vuls/id/677427
- http://seclists.org/fulldisclosure/2016/Nov/38
- http://www.securityfocus.com/bid/94130
- https://www.exploit-db.com/exploits/40805/
- https://www.kb.cert.org/vuls/id/677427
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2016-6563