CVE-2018-20056: Buffer Overflow
Published Dec 11, 2018
·Updated
An issue was discovered in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 and DIR-605L Rev.B 2.12B1 devices. There is a stack-based buffer overflow allowing remote attackers to execute arbitrary code without authentication via the goform/formLanguageChange currTime parameter.
Affected Software
4 affected components
D-Link Dir-619l Firmware=2.06b1
Dlink Dir-619l
D-Link Dir-605l Firmware=2.12b1
Dlink Dir-605l
Event History
Dec 11, 2018
CVE Published
via MITRE·09:00 AM
Data Sourced
via MITRE·09:00 AM
Description
Frequently Asked Questions
1
What is CVE-2018-20056?
CVE-2018-20056 is a vulnerability discovered in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 and DIR-605L Rev.B 2.12B1 devices.
2
How does CVE-2018-20056 impact the affected systems?
CVE-2018-20056 allows remote attackers to execute arbitrary code without authentication via a stack-based buffer overflow.
3
What is the severity of CVE-2018-20056?
CVE-2018-20056 has a severity rating of 9.8 (critical).
4
Are D-Link DIR-619L Rev.B 2.06B1 devices vulnerable to CVE-2018-20056?
Yes, D-Link DIR-619L Rev.B 2.06B1 devices are vulnerable to CVE-2018-20056.
5
Are D-Link DIR-605L Rev.B 2.12B1 devices vulnerable to CVE-2018-20056?
Yes, D-Link DIR-605L Rev.B 2.12B1 devices are vulnerable to CVE-2018-20056.