D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow. The hnap_main function in the cgibin handler uses sprintf to format the soapaction header onto the stack and has no limit on the size.
References
| Link | Resource |
|---|---|
| https://github.com/luqiut/iot/blob/main/DIR-645%20Stack%20overflow.md | Exploit Third Party Advisory |
| https://www.dlink.com/en/security-bulletin/ | Vendor Advisory |
| https://github.com/luqiut/iot/blob/main/DIR-645%20Stack%20overflow.md | Exploit Third Party Advisory |
| https://www.dlink.com/en/security-bulletin/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 06:29
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/luqiut/iot/blob/main/DIR-645%20Stack%20overflow.md - Exploit, Third Party Advisory | |
| References | () https://www.dlink.com/en/security-bulletin/ - Vendor Advisory |
08 Apr 2022, 06:33
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-787 | |
| CPE | cpe:2.3:h:dlink:dir-645:a1:*:*:*:*:*:*:* cpe:2.3:o:dlink:dir-645_firmware:1.03:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : 7.5
v3 : 9.8 |
| References | (MISC) https://github.com/luqiut/iot/blob/main/DIR-645%20Stack%20overflow.md - Exploit, Third Party Advisory | |
| References | (MISC) https://www.dlink.com/en/security-bulletin/ - Vendor Advisory |
31 Mar 2022, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-03-31 21:15
Updated : 2024-11-21 06:29
NVD link : CVE-2021-43722
Mitre link : CVE-2021-43722
CVE.ORG link : CVE-2021-43722
JSON object : View
Products Affected
dlink
- dir-645_firmware
- dir-645
CWE
CWE-787
Out-of-bounds Write