D-Link Dsp-W215 vulnerabilities

1 known vulnerability affecting d-link/dsp-w215.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2014-125117CRITICALCVSS 9.3v1.022025-07-25

CVE-2014-125117 [CRITICAL] CWE-20 CVE-2014-125117: A stack-based buffer overflow vulnerability in the my_cgi.cgi component of certain D-Link devices, i A stack-based buffer overflow vulnerability in the my_cgi.cgi component of certain D-Link devices, including the DSP-W215 version 1.02, can be exploited via a specially crafted HTTP POST request to the /common/info.cgi endpoint. This flaw enables an unauthenticated attacker to achieve remote code execution with system-level privileges.