PT-2017-15703 · D Link · Dir-850L

Published 2017-12-15 · Updated 2023-11-08 · CVE-2017-3193

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DIR-850L firmware versions 1.14B07 and 2.07.B05

Description A stack-based buffer overflow issue exists in the web administration interface HNAP service of the affected devices.

Recommendations For firmware version 1.14B07, update to a newer version that contains a fix for this issue. For firmware version 2.07.B05, update to a newer version that contains a fix for this issue. As a temporary workaround, consider restricting access to the HNAP service in the web administration interface until a patch is available.

Fix

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

CVE-2017-3193

Affected Products

Dir-850L

References · 7

• https://tools.cisco.com/security/center/viewAlert.x?alertId=52967 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2017-3193 · Security Note
• https://osv.dev/vulnerability/CVE-2017-3193 · Vendor Advisory
• https://kb.cert.org/vuls/id/305448 · Note
• https://twitter.com/NCCGroupInfosec/status/845269159277723649 · Note
• http://securityfocus.com/bid/96747 · Note
• https://nccgroup.trust/uk/our-research/d-link-dir-850l-web-admin-interface-vulnerable-to-stack-based-buffer-overflow/?research=Technical+advisories · Note