CVE-2022-31414

Опубликовано: 07 сент. 2022

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

D-Link DIR-1960 firmware DIR-1960_A1_1.11 was discovered to contain a buffer overflow via srtcat in prog.cgi. This vulnerability allowed attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

Ссылки

https://github.com/Davidteeri/Bug-Report/blob/main/dlink-dir1960-%200x42acdc.md
Broken Link
Third Party Advisory
https://tsd.dlink.com.tw/ddgo
Vendor Advisory
https://www.dlink.com/en/security-bulletin/
Broken Link
Vendor Advisory
https://github.com/Davidteeri/Bug-Report/blob/main/dlink-dir1960-%200x42acdc.md
Broken Link
Third Party Advisory
https://tsd.dlink.com.tw/ddgo
Vendor Advisory
https://www.dlink.com/en/security-bulletin/
Broken Link
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:dlink:dir-1960_firmware:1.11:*:*:*:*:*:*:*

cpe:2.3:h:dlink:dir-1960:a1:*:*:*:*:*:*:*

EPSS

Процентиль: 72%

0.0071

Низкий

7.5 High

CVSS3

7.5 High

CVSS3

Дефекты

CWE-120

Связанные уязвимости

GHSA-6mjh-x57x-fxwc

CVSS3: 7.5

github

больше 3 лет назад

EPSS

Процентиль: 72%

0.0071

Низкий

7.5 High

CVSS3

7.5 High

CVSS3

Дефекты

CWE-120