CVE-2015-2052

Stack-based buffer overflow in the DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary code via a long string in a GetDeviceSettings action to the HNAP interface.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2015-02-23

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Dir-645 Firmware (Dlink)

References

• http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10051
• http://www.securityfocus.com/bid/72623