CVE-2016-5681
Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR-822 C1 3.01 before 3.01WWb02, DIR-823 A1 1.00 before 1.00WWb05, DIR-895L A1 1.11 before 1.11WWb04, DIR-890L A1 1.09 before 1.09b14, DIR-885L A1 1.11 before 1.11WWb07, DIR-880L A1 1.07 before 1.07WWb08, DIR-868L B1 2.03 before 2.03WWb01, and DIR-868L C1 3.00 before 3.00WWb01 devices allows remote attackers to execute arbitrary code via a long session cookie.
Published:Aug 25, 2016
Last Modified:Apr 12, 2025
EPS:Aug 25, 2016
EPSS Score:0.20756
CVSS Score:9.8
Affected Products
Vendor
Product
Action
Vendor
D-link
Product
Dir-817l\(w\) Firmware
D-link
Dir-817l\(w\) Firmware
Vendor
D-link
Product
Dir-818l\(w\) Firmware
D-link
Dir-818l\(w\) Firmware
Vendor
D-link
Product
Dir-823 Firmware
D-link
Dir-823 Firmware
Vendor
D-link
Product
Dir-850l Firmare
D-link
Dir-850l Firmare
Vendor
D-link
Product
Dir-880l Firmware
D-link
Dir-880l Firmware
Vendor
D-link
Product
Dir-885l Firmware
D-link
Dir-885l Firmware
Vendor
D-link
Product
Dir-890l Firmware
D-link
Dir-890l Firmware
Vendor
D-link
Product
Dir-895l Firmware
D-link
Dir-895l Firmware
Vendor
Dlink
Product
Dir-817l\(w\)
Dlink
Dir-817l\(w\)
Vendor
Dlink
Product
Dir-818l\(w\)
Dlink
Dir-818l\(w\)
Vendor
Dlink
Product
Dir-822
Dlink
Dir-822
Vendor
Dlink
Product
Dir-822 Firmware
Dlink
Dir-822 Firmware
Vendor
Dlink
Product
Dir-823
Dlink
Dir-823
Vendor
Dlink
Product
Dir-850l
Dlink
Dir-850l
Vendor
Dlink
Product
Dir-868l
Dlink
Dir-868l
Vendor
Dlink
Product
Dir-868l Firmware
Dlink
Dir-868l Firmware
Vendor
Dlink
Product
Dir-880l
Dlink
Dir-880l
Vendor
Dlink
Product
Dir-885l
Dlink
Dir-885l
Vendor
Dlink
Product
Dir-890l
Dlink
Dir-890l
Vendor
Dlink
Product
Dir-895l
Dlink
Dir-895l
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
