Buffer Overflow Vulnerability in D-Link Routers
CVE-2017-14948

9.8CRITICAL

Key Information:

Vendor
D-Link
Status
Dir-868l Firmware
Vendor
CVE Published:
14 October 2019

Badges

👾 Exploit Exists🟡 Public PoC

Summary

Certain D-Link routers are vulnerable to a buffer overflow due to improper handling of the CONTENT_TYPE HTTP header in the htdocs/fileaccess.cgi component. When a crafted HTTP request is received, particularly if the CONTENT_TYPE header starts with 'boundary=' followed by more than 256 characters, this can trigger a buffer overflow. This vulnerability can be exploited by remote attackers to execute arbitrary code, leading to potential unauthorized access and control over the affected devices. Users of DIR-880L and DIR-895 L/R are encouraged to review their device configurations and apply any available firmware updates to mitigate this risk.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

d_link_880_bug
Created by badnack

References

https://github.com/badnack/d_link_880_bug/blob/master/REA...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability Reserved

.