CVE-2014-7859: Buffer Overflow
Stack-based buffer overflow in loginmgr.cgi in D-Link firmware DNR-320L and DNS-320LW before 1.04b08, DNR-322L before 2.10 build 03, DNR-326 before 2.10 build 03, and DNS-327L before 1.04b01 allows remote attackers to execute arbitrary code by crafting malformed "Host" and "Referer" header values.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-7859?
CVE-2014-7859 is identified as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2014-7859?
To fix CVE-2014-7859, users should upgrade their D-Link device firmware to the latest version that mitigates this vulnerability.
Which devices are affected by CVE-2014-7859?
CVE-2014-7859 affects D-Link firmware versions for DNR-320L, DNS-320LW, DNR-322L, DNR-326, and DNS-327L prior to their respective patched versions.
What type of attack can exploit CVE-2014-7859?
CVE-2014-7859 can be exploited by remote attackers through a stack-based buffer overflow triggered by malformed 'Host' and 'Referer' header values.
Is there a known fix release for CVE-2014-7859?
Yes, firmware versions after 1.04b08 for DNR-320L, DNS-320LW, 2.10 build 03 for DNR-322L and DNR-326, and 1.04b01 for DNS-327L contain fixes for CVE-2014-7859.