CVE-2016-6563
D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login action
- State
- Published
- Severity
- Not scored
- Published
- Jul 13, 2018
- Updated
- Aug 6, 2024
- Reserved
- Aug 3, 2016
Description
Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action, Username, LoginPassword, and Captcha. The following products are affected: DIR-823, DIR-822, DIR-818L(W), DIR-895L, DIR-890L, DIR-885L, DIR-880L, DIR-868L, and DIR-850L.
Scores
The record has no CVSS score.
Weaknesses
Affected Products
| Product | Versions |
|---|---|
DIR-823D-Link |
|
DIR-822D-Link |
|
DIR-818L(W)D-Link |
|
DIR-895LD-Link |
|
DIR-890LD-Link |
|
DIR-885LD-Link |
|
DIR-880LD-Link |
|
DIR-868LD-Link |
|
DIR-850LD-Link |
|
References
- 40805exploit
- VU#677427third-party-advisory
- 94130vdb-entry
- 20161107 [CVE-2016-6563 / VU#677427]: Dlink DIR routers HNAP Login stack buffer overflowmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.