Vulnerability Intelligence Report
CVE-2016-5681
Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR-822 C1 3.01 before 3.01WWb02, DIR-823 A1 1.00 before 1.00WWb05, DIR-895L A1 1.11 before 1.11WWb04, DIR-890L A1 1.09 before 1.09b14, DIR-885L A1 1.11 before 1.11WWb07, DIR-880L A1 1.07 before 1.07WWb08, DIR-868L B1 2.03 before 2.03WWb01, and DIR-868L C1 3.00 before 3.00WWb01 devices allows remote attackers to execute arbitrary code via a long session cookie.
No Active Exploit Signals
CVSS Base Score
9.8
CRITICAL
EPSS Probability:11.93%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| dlink | dir-868l_firmware | all |
| dlink | dir-868l | b1, c1 |
| dlink | dir-822_firmware | 3.01 |
| dlink | dir-822 | a1 |
| d-link | dir-880l_firmware | all |
| dlink | dir-880l | a1 |
| d-link | dir-850l_firmare | all |
| dlink | dir-850l | b1 |
| d-link | dir-895l_firmware | all |
| dlink | dir-895l | a1 |
| d-link | dir-817l\(w\)_firmware | all |
| dlink | dir-817l\(w\) | ax |
| d-link | dir-818l\(w\)_firmware | all |
| dlink | dir-818l\(w\) | ax |
| d-link | dir-890l_firmware | all |
| dlink | dir-890l | a1 |
| d-link | dir-823_firmware | all |
| dlink | dir-823 | a1 |
| d-link | dir-885l_firmware | all |
| dlink | dir-885l | a1 |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
11.927%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | CERT/CC · CERT · USA |
| Reserved | 2016-06-16T00:00:00 |
| Published | 2016-08-25T21:00:00 |
| Patch Date | 2016-08-11 |
| Last Updated | 2024-08-06T01:08:00 |
Community Chatter & Buzz