CVE-2017-3193: Buffer Overflow
First published: Fri Dec 15 2017(Updated: )
Multiple D-Link devices including the DIR-850L firmware versions 1.14B07 and 2.07.B05 contain a stack-based buffer overflow vulnerability in the web administration interface HNAP service.
Credit: cret@cert.org cret@cert.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| D-link Dir-850l Firmware | =1.14b07 | |
| D-link Dir-850l Firmware | =2.07.b05 | |
| Dlink Dir-850l | ||
| Dlink Dir-850l Firmware | =1.14b07 | |
| Dlink Dir-850l Firmware | =2.07.b05 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/96747
- https://tools.cisco.com/security/center/viewAlert.x?alertId=52967
- https://twitter.com/NCCGroupInfosec/status/845269159277723649
- https://www.kb.cert.org/vuls/id/305448
- https://www.nccgroup.trust/uk/our-research/d-link-dir-850l-web-admin-interface-vulnerable-to-stack-based-buffer-overflow/?research=Technical+advisories
Frequently Asked Questions
What is CVE-2017-3193?
CVE-2017-3193 is a vulnerability found in multiple D-Link devices including the DIR-850L firmware versions 1.14B07 and 2.07.B05.
What is the severity of CVE-2017-3193?
CVE-2017-3193 has a severity score of 8.8, which is considered high.
Which devices are affected by CVE-2017-3193?
Multiple D-Link devices including the DIR-850L firmware versions 1.14B07 and 2.07.B05 are affected by CVE-2017-3193.
What is the vulnerability in CVE-2017-3193?
CVE-2017-3193 is a stack-based buffer overflow vulnerability in the web administration interface HNAP service.
How can I fix CVE-2017-3193?
To fix CVE-2017-3193, update the firmware of your D-Link DIR-850L device to a version that does not contain the vulnerability.
- collector/nvd-index
- collector/nvd-api
- agent/severity
- agent/author
- agent/weakness
- agent/references
- agent/description
- agent/event
- agent/type
- agent/first-publish-date
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/d-link
- canonical/d-link dir-850l firmware
- version/d-link dir-850l firmware/1.14b07
- version/d-link dir-850l firmware/2.07.b05
- vendor/dlink
- canonical/dlink dir-850l
- canonical/dlink dir-850l firmware
- version/dlink dir-850l firmware/1.14b07
- version/dlink dir-850l firmware/2.07.b05