10
CVE-2016-1558
- EPSS 9.1%
- Veröffentlicht 21.04.2017 15:59:00
- Zuletzt bearbeitet 13.05.2026 00:24:29
- Erkennungen
LoginBuffer overflow in D-Link DAP-2310 2.06 and earlier, DAP-2330 1.06 and earlier, DAP-2360 2.06 and earlier, DAP-2553 H/W ver. B1 3.05 and earlier, DAP-2660 1.11 and earlier, DAP-2690 3.15 and earlier, DAP-2695 1.16 and earlier, DAP-3320 1.00 and earlier, and DAP-3662 1.01 and earlier allows remote attackers to have unspecified impact via a crafted 'dlink_uid' cookie.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dlink ≫ Dap-3662 Firmware Version 1.01
Dlink ≫ Dap-2310 Firmware Version 2.06
Dlink ≫ Dap-2330 Firmware Version 1.06
Dlink ≫ Dap-2360 Firmware Version 2.06
Dlink ≫ Dap-2553 Firmware Version 3.05
Dlink ≫ Dap-2660 Firmware Version 1.11
Dlink ≫ Dap-2690 Firmware Version 3.15
Dlink ≫ Dap-2695 Firmware Version 1.16
Dlink ≫ Dap-3320 Firmware Version 1.00
Dlink ≫ Dap-2230 Firmware Version 1.02
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 9.1% | 0.946 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 9.8 | 3.9 | 5.9 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| NIST | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html
http://seclists.org/fulldisclosure/2016/Feb/112
http://www.dlink.com/mk/mk/support/support-news/2016/march/16/firmadyne-cve_2016_1558-cve_2016_1559