CVE-2020-19323

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2020-19323
An issue was discovered in /bin/mini_upnpd on D-Link DIR-619L 2.06beta devices. There is a heap buffer overflow allowing remote attackers to restart router via the M-search request ST parameter. No authentication required

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/hhhhu8045759/619L_upnpd_heapoverflow Exploit Third Party Advisory
https://www.dlink.com/en/security-bulletin/ Product
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dlink:dir-619l_firmware:2.06:beta:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-619l:-:*:*:*:*:*:*:*
History

13 Sep 2023, 19:04

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5
CWE CWE-787
CPE cpe:2.3:o:dlink:dir-619l_firmware:2.06:beta:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-619l:-:*:*:*:*:*:*:*
First Time Dlink
Dlink dir-619l
Dlink dir-619l Firmware
References (MISC) https://www.dlink.com/en/security-bulletin/ - (MISC) https://www.dlink.com/en/security-bulletin/ - Product
References (MISC) https://github.com/hhhhu8045759/619L_upnpd_heapoverflow - (MISC) https://github.com/hhhhu8045759/619L_upnpd_heapoverflow - Exploit, Third Party Advisory

11 Sep 2023, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-09-11 19:15

Updated : 2023-12-10 15:14

NVD link : CVE-2020-19323

Mitre link : CVE-2020-19323

CVE.ORG link : CVE-2020-19323

JSON object : View

Products Affected

dlink

  • dir-619l_firmware
  • dir-619l
CWE
CWE-787

Out-of-bounds Write