CVE Feed

    Dashboard / CVE / CVE-2014-3936

    CVE-2014-3936

    Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev. A1) with firmware 1.01b06 and earlier, DIR-505 with firmware before 1.08b10, and DIR-505L with firmware 1.01 and earlier allows remote attackers to execute arbitrary code via a long Content-Length header in a GetDeviceSettings action in an HNAP request.

    Published:Jun 2, 2014
    Last Modified:Apr 12, 2025
    EPS:Jun 2, 2014
    EPSS Score:0.86285
    CVSS Score:10

    Affected Products

    Vendor
    Dlink
    Product
    Dir-505l Shareport Mobile Companion
    Vendor
    Dlink
    Product
    Dir505 Shareport Mobile Companion
    Vendor
    Dlink
    Product
    Dir505 Shareport Mobile Companion Firmware
    Vendor
    Dlink
    Product
    Dir505l Shareport Mobile Companion Firmware
    Vendor
    Dlink
    Product
    Dsp-w215
    Vendor
    Dlink
    Product
    Dsp-w215 Firmware

    Exploits

    http://packetstormsecurity.com/files/127427/D-Link-HNAP-Request-Remote-Buffer-Overflow.htmlhttp://www.devttys0.com/2014/05/hacking-the-d-link-dsp-w215-smart-plughttp://www.securityfocus.com/bid/67651http://packetstormsecurity.com/files/127427/D-Link-HNAP-Request-Remote-Buffer-Overflow.htmlhttp://www.devttys0.com/2014/05/hacking-the-d-link-dsp-w215-smart-plughttp://www.securityfocus.com/bid/67651https://www.exploit-db.com/exploits/34064

    References

    http://packetstormsecurity.com/files/127427/D-Link-HNAP-Request-Remote-Buffer-Overflow.html
    http://secunia.com/advisories/58728
    http://secunia.com/advisories/58972
    http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10027
    http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10029
    http://www.devttys0.com/2014/05/hacking-the-d-link-dsp-w215-smart-plug
    http://www.securityfocus.com/bid/67651
    http://packetstormsecurity.com/files/127427/D-Link-HNAP-Request-Remote-Buffer-Overflow.html
    http://secunia.com/advisories/58728
    http://secunia.com/advisories/58972
    http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10027
    http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10029
    http://www.devttys0.com/2014/05/hacking-the-d-link-dsp-w215-smart-plug
    http://www.securityfocus.com/bid/67651

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High