CVE-2015-2052: Buffer Overflow
Published Feb 23, 2015
·Updated
Stack-based buffer overflow in the DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary code via a long string in a GetDeviceSettings action to the HNAP interface.
Affected Software
2 affected components
Dlink Dir-645 Firmware<=1.04b12
Dlink Dir-645=a1
Event History
Feb 23, 2015
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-2052?
CVE-2015-2052 is classified as a high severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2015-2052?
To fix CVE-2015-2052, you should update the D-Link DIR-645 firmware to a version later than 1.04b12.
3
What type of vulnerability is CVE-2015-2052?
CVE-2015-2052 is a stack-based buffer overflow vulnerability affecting the HNAP interface.
4
Who is affected by CVE-2015-2052?
Users of the D-Link DIR-645 Router running firmware version 1.04b12 or earlier are affected by CVE-2015-2052.
5
Can CVE-2015-2052 allow unauthorized access?
Yes, CVE-2015-2052 can allow unauthorized attackers to execute arbitrary code on the device.