Dlink Dir505 Shareport Mobile Companion Firmware vulnerabilities

1 known vulnerability affecting dlink/dir505_shareport_mobile_companion_firmware.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2014-3936CRITICALCVSS 10.0PoC≤ 1.072014-06-02

CVE-2014-3936 [CRITICAL] CWE-119 CVE-2014-3936: Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev. A1) w Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev. A1) with firmware 1.01b06 and earlier, DIR-505 with firmware before 1.08b10, and DIR-505L with firmware 1.01 and earlier allows remote attackers to execute arbitrary code via a long Content-Length header in a GetDeviceSettings action in an HNAP request.