Buffer overflow in Dlink Dir-100
CVE-2013-6027
Stack-based buffer overflow in the RuntimeDiagnosticPing function in /bin/webs on D-Link DIR-100 routers might allow remote authenticated administrators to execute arbitrary commands via a long set/runtime/diagnostic/pingIp parameter to Tools/tools_misc.xgi.
Vulnerability class: Buffer Overflow
EPSS: 0.047 (90.8th percentile) — read the EPSS interpretation.
Affected products
- Dlink Dir-100
- N/a — versions n/a
Weakness classification (CWE)
References
- cret@cert.org (Exploit, x_refsource_MISC)
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)