CVE-2006-3687
Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in D-Link DI-524, DI-604 Broadband Router, DI-624, D-Link DI-784, WBR-1310 Wireless G Router, WBR-2310 RangeBooster G Router, and EBR-2310 Ethernet Broadband Router allows remote attackers to execute arbitrary code via a long M-SEARCH request to UDP port 1900.
Published:Jul 18, 2006
Last Modified:Apr 16, 2026
EPS:Jul 18, 2006
EPSS Score:0.20829
CVSS Score:7.5
Affected Products
Vendor
Product
Action
Vendor
D-link
Product
Di-604 Broadband Router
D-link
Di-604 Broadband Router
Vendor
D-link
Product
Di-784
D-link
Di-784
Vendor
D-link
Product
Ebr-2310 Ethernet Broadband Router
D-link
Ebr-2310 Ethernet Broadband Router
Vendor
D-link
Product
Wbr-1310 Wireless G Router
D-link
Wbr-1310 Wireless G Router
Vendor
D-link
Product
Wbr-2310 Rangebooster G Router
D-link
Wbr-2310 Rangebooster G Router
Vendor
Dlink
Product
Di-524
Dlink
Di-524
Vendor
Dlink
Product
Di-624
Dlink
Di-624
Common Weakness Enumeration
No CWE recorded yet
Common Attack Pattern Enumeration and Classification (CAPEC)
No CAPEC recorded yet
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
