PT-2018-1333 · D Link · D-Link Dir-629
Published
2018-05-11
·
Updated
2018-06-18
·
CVE-2018-10996
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
D-Link DIR-629-B1 (affected versions not specified)
Description
The issue is caused by a buffer overflow in the weblogin log function. This can be exploited by a remote attacker using a specially crafted request to the session.cgi?ACTION=logout endpoint, which includes a long value for the
REMOTE ADDR environment variable. Successful exploitation may allow the attacker to execute arbitrary code or cause a denial of service.Recommendations
As a temporary workaround, consider disabling the weblogin log function until a patch is available.
Restrict access to the session.cgi endpoint to minimize the risk of exploitation.
Avoid using long values for the
REMOTE ADDR environment variable in the affected endpoint until the issue is resolved.Exploit
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
D-Link Dir-629