Логотип exploitDog
bind:CVE-2025-10779
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-10779

Количество 3

Количество 3

nvd логотип

CVE-2025-10779

5 месяцев назад

A vulnerability was found in D-Link DCS-935L up to 1.13.01. The impacted element is the function sub_402280 of the file /HNAP1/. The manipulation of the argument HNAP_AUTH/SOAPAction results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.

CVSS3: 8.8
EPSS: Низкий
github логотип

GHSA-fh7p-6g7j-v2cr

5 месяцев назад

A vulnerability was found in D-Link DCS-935L up to 1.13.01. The impacted element is the function sub_402280 of the file /HNAP1/. The manipulation of the argument HNAP_AUTH/SOAPAction results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.

CVSS3: 8.8
EPSS: Низкий
fstec логотип

BDU:2025-11475

5 месяцев назад

Уязвимость функции strcpy() микропрограммного обеспечения маршрутизаторов D-Link DCS-935L, позволяющая нарушителю выполнить произвольный код

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-10779

A vulnerability was found in D-Link DCS-935L up to 1.13.01. The impacted element is the function sub_402280 of the file /HNAP1/. The manipulation of the argument HNAP_AUTH/SOAPAction results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.

CVSS3: 8.8
0%
Низкий
5 месяцев назад
github логотип
GHSA-fh7p-6g7j-v2cr

A vulnerability was found in D-Link DCS-935L up to 1.13.01. The impacted element is the function sub_402280 of the file /HNAP1/. The manipulation of the argument HNAP_AUTH/SOAPAction results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.

CVSS3: 8.8
0%
Низкий
5 месяцев назад
fstec логотип
BDU:2025-11475

Уязвимость функции strcpy() микропрограммного обеспечения маршрутизаторов D-Link DCS-935L, позволяющая нарушителю выполнить произвольный код

CVSS3: 8.8
0%
Низкий
5 месяцев назад

Уязвимостей на страницу