D-Link DSL-320B-D1 devices through EU_1.25 are prone to multiple Stack-Based Buffer Overflows that allow unauthenticated remote attackers to take over a device via the login.xgi user and pass parameters. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
References
Link | Resource |
---|---|
http://packetstormsecurity.com/files/162133/D-Link-DSL-320B-D1-Pre-Authentication-Buffer-Overflow.html | Exploit Third Party Advisory VDB Entry |
http://seclists.org/fulldisclosure/2021/Apr/15 | Mailing List Third Party Advisory |
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10216 | Vendor Advisory |
https://www.dlink.com/en/security-bulletin | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
07 Nov 2023, 03:31
Type | Values Removed | Values Added |
---|---|---|
Summary | D-Link DSL-320B-D1 devices through EU_1.25 are prone to multiple Stack-Based Buffer Overflows that allow unauthenticated remote attackers to take over a device via the login.xgi user and pass parameters. NOTE: This vulnerability only affects products that are no longer supported by the maintainer |
20 Apr 2021, 18:10
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:d-link:dsl-320b-d1:*:*:*:*:*:*:*:* cpe:2.3:h:d-link:dsl-320b-d1:-:*:*:*:*:*:*:* |
|
CWE | CWE-787 | |
CVSS |
v2 : v3 : |
v2 : 10.0
v3 : 9.8 |
References | (FULLDISC) http://seclists.org/fulldisclosure/2021/Apr/15 - Mailing List, Third Party Advisory | |
References | (MISC) https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10216 - Vendor Advisory | |
References | (MISC) https://www.dlink.com/en/security-bulletin - Vendor Advisory | |
References | (MISC) http://packetstormsecurity.com/files/162133/D-Link-DSL-320B-D1-Pre-Authentication-Buffer-Overflow.html - Exploit, Third Party Advisory, VDB Entry |
08 Apr 2021, 16:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
08 Apr 2021, 11:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
07 Apr 2021, 11:35
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-04-07 11:15
Updated : 2024-04-11 01:10
NVD link : CVE-2021-26709
Mitre link : CVE-2021-26709
CVE.ORG link : CVE-2021-26709
JSON object : View
Products Affected
d-link
- dsl-320b-d1
CWE
CWE-787
Out-of-bounds Write