CVE-2017-3193

CWE-121 — Stack-based Buffer OverflowCWE-119 — Buffer Overflow3 documents3 sources
Severity
8.8HIGH
EPSS
1.1%
top 22.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
D-link Dir-850l AND Potentially OthersDlink Dir-850l Firmware
Timeline
PublishedDec 16
Latest updateMay 13

Description

Multiple D-Link devices including the DIR-850L firmware versions 1.14B07 and 2.07.B05 contain a stack-based buffer overflow vulnerability in the web administration interface HNAP service.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶NVDdlink/dir-850l_firmware1.14b07, 2.07.b05+1
▶CVEListV5d-link/dir-850l_and_potentially_others1.14B07, 2.07.B05+1

Patches

Patch: tools.cisco.com ↗Patch: tools.cisco.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-fcjv-8xx2-87f8: Multiple D-Link devices including the DIR-850L firmware versions 1↗2022-05-13
▶
CVEList
CVE-2017-3193: Multiple D-Link devices including the DIR-850L firmware versions 1↗2017-12-15
▶
CVE-2017-3193 (HIGH CVSS 8.8) | Multiple D-Link devices including t | cvebase.io