Описание
A stack-based buffer overflow vulnerability in the my_cgi.cgi component of certain D-Link devices, including the DSP-W215 version 1.02, can be exploited via a specially crafted HTTP POST request to the /common/info.cgi endpoint. This flaw enables an unauthenticated attacker to achieve remote code execution with system-level privileges.
Ссылки
- Exploit
- ExploitThird Party Advisory
- Exploit
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:dlink:dsp-w215_firmware:1.02:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dsp-w215:-:*:*:*:*:*:*:*
EPSS
Процентиль: 98%
0.48485
Средний
9.8 Critical
CVSS3
Дефекты
CWE-20
Связанные уязвимости
CVSS3: 9.8
github
7 месяцев назад
A stack-based buffer overflow vulnerability in the my_cgi.cgi component of certain D-Link devices, including the DSP-W215 version 1.02, can be exploited via a specially crafted HTTP POST request to the /common/info.cgi endpoint. This flaw enables an unauthenticated attacker to achieve remote code execution with system-level privileges.
EPSS
Процентиль: 98%
0.48485
Средний
9.8 Critical
CVSS3
Дефекты
CWE-20