D-Link DWR-M920/DWR-M921/DWR-M960/DWR-M961/DIR-825M formPingDiagnosticRun buffer overflow
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| D-Link | DWR-M920 | affected |
|
|||||||||
| D-Link | DWR-M921 | affected |
|
|||||||||
| D-Link | DWR-M960 | affected |
|
|||||||||
| D-Link | DWR-M961 | affected |
|
|||||||||
| D-Link | DIR-825M | affected |
|
Configuration 1 [-]
| AND |
|
Configuration 2 [-]
| AND |
|
Configuration 3 [-]
| AND |
|
Configuration 4 [-]
| AND |
|
Configuration 5 [-]
| AND |
|
No data.
| Vendor | Product | Versions |
|---|---|---|
| D-link | Dir-825 | — |
| D-link | Dwr-920 | — |
| D-link | Dwr-921 | — |
| D-link | Dwr-960 | — |
| D-link | Dwr-961 | — |
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.876% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Dlink
Dlink dir-825m Dlink dir-825m Firmware Dlink dwr-m920 Dlink dwr-m920 Firmware Dlink dwr-m921 Dlink dwr-m921 Firmware Dlink dwr-m960 Dlink dwr-m960 Firmware Dlink dwr-m961 Dlink dwr-m961 Firmware |
|
| CPEs | cpe:2.3:h:dlink:dir-825m:-:*:*:*:*:*:*:* cpe:2.3:h:dlink:dwr-m920:-:*:*:*:*:*:*:* cpe:2.3:h:dlink:dwr-m921:-:*:*:*:*:*:*:* cpe:2.3:h:dlink:dwr-m960:b1:*:*:*:*:*:*:* cpe:2.3:h:dlink:dwr-m961:-:*:*:*:*:*:*:* cpe:2.3:o:dlink:dir-825m_firmware:1.01.07:*:*:*:*:*:*:* cpe:2.3:o:dlink:dir-825m_firmware:1.1.47:*:*:*:*:*:*:* cpe:2.3:o:dlink:dwr-m920_firmware:1.01.07:*:*:*:*:*:*:* cpe:2.3:o:dlink:dwr-m920_firmware:1.1.47:*:*:*:*:*:*:* cpe:2.3:o:dlink:dwr-m921_firmware:1.01.07:*:*:*:*:*:*:* cpe:2.3:o:dlink:dwr-m921_firmware:1.1.47:*:*:*:*:*:*:* cpe:2.3:o:dlink:dwr-m960_firmware:1.01.07:*:*:*:*:*:*:* cpe:2.3:o:dlink:dwr-m960_firmware:1.1.47:*:*:*:*:*:*:* cpe:2.3:o:dlink:dwr-m961_firmware:1.01.07:*:*:*:*:*:*:* cpe:2.3:o:dlink:dwr-m961_firmware:1.1.47:*:*:*:*:*:*:* |
|
| Vendors & Products |
Dlink
Dlink dir-825m Dlink dir-825m Firmware Dlink dwr-m920 Dlink dwr-m920 Firmware Dlink dwr-m921 Dlink dwr-m921 Firmware Dlink dwr-m960 Dlink dwr-m960 Firmware Dlink dwr-m961 Dlink dwr-m961 Firmware |
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
D-link
D-link dir-825 D-link dwr-920 D-link dwr-921 D-link dwr-960 D-link dwr-961 |
|
| Vendors & Products |
D-link
D-link dir-825 D-link dwr-920 D-link dwr-921 D-link dwr-960 D-link dwr-961 |
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A security flaw has been discovered in D-Link DWR-M920, DWR-M921, DWR-M960, DWR-M961 and DIR-825M 1.01.07/1.1.47. This vulnerability affects unknown code of the file /boafrm/formPingDiagnosticRun. Performing manipulation of the argument host results in buffer overflow. The attack may be initiated remotely. The exploit has been released to the public and may be exploited. | |
| Title | D-Link DWR-M920/DWR-M921/DWR-M960/DWR-M961/DIR-825M formPingDiagnosticRun buffer overflow | |
| Weaknesses | CWE-119 CWE-120 |
|
| References |
| |
| Metrics |
cvssV2_0
|