Details of VAR-201502-0202

ID

VAR-201502-0202

CVE

CVE-2015-2052

TITLE

D-Link DIR-645 Wired/Wireless Router firmware stack-based buffer overflow vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2015-001592

DESCRIPTION

Stack-based buffer overflow in the DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary code via a long string in a GetDeviceSettings action to the HNAP interface. The D-Link DIR-645 is a D-Link router that regulates wireless transmit power. Ax. D-Link DIR-645 has command injection and buffer overflow vulnerabilities that allow malicious applications to perform buffer overflow attacks, execute arbitrary commands, and inject arbitrary commands through the HNAP interface. D-Link DIR-645 is prone to a command-injection and a stack-based buffer-overflow vulnerability. Ax with firmware 1.04b12 and earlier. The vulnerability stems from the fact that the program does not adequately filter the input submitted by the user when processing the GetDeviceSettings request

Trust: 3.06

sources: NVD: CVE-2015-2052 // JVNDB: JVNDB-2015-001592 // CNVD: CNVD-2015-01376 // CNVD: CNVD-2015-01332 // BID: 72623 // VULHUB: VHN-80013

IOT TAXONOMY

category:

['IoT', 'Network device']

sub_category:

Trust: 1.2

sources: CNVD: CNVD-2015-01376 // CNVD: CNVD-2015-01332

AFFECTED PRODUCTS

vendor:	dlink	model:	dir-645	scope:	lte	version:	1.04b12	Trust: 1.0
vendor:	d link	model:	dir-645	scope:	eq	version:	ax	Trust: 0.8
vendor:	d link	model:	dir-645	scope:	lte	version:	1.04b12	Trust: 0.8
vendor:	d link	model:	dir-645 <=1.04b12	scope:	-	version:	-	Trust: 0.6
vendor:	d link	model:	dir-645	scope:	-	version:	-	Trust: 0.6
vendor:	d link	model:	dir-645	scope:	eq	version:	1.04b12	Trust: 0.6

sources: CNVD: CNVD-2015-01376 // CNVD: CNVD-2015-01332 // JVNDB: JVNDB-2015-001592 // CNNVD: CNNVD-201502-367 // NVD: CVE-2015-2052

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2015-2052
value:	HIGH
Trust: 1.0
NVD:	CVE-2015-2052
value:	HIGH
Trust: 0.8
CNVD:	CNVD-2015-01376
value:	HIGH
Trust: 0.6
CNVD:	CNVD-2015-01332
value:	MEDIUM
Trust: 0.6
CNNVD:	CNNVD-201502-367
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-80013
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2015-2052
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
CNVD:	CNVD-2015-01376
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
CNVD:	CNVD-2015-01332
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	8.6
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
VULHUB:	VHN-80013
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: CNVD: CNVD-2015-01376 // CNVD: CNVD-2015-01332 // VULHUB: VHN-80013 // JVNDB: JVNDB-2015-001592 // CNNVD: CNNVD-201502-367 // NVD: CVE-2015-2052

PROBLEMTYPE DATA

problemtype:

CWE-119

Trust: 1.9

sources: VULHUB: VHN-80013 // JVNDB: JVNDB-2015-001592 // NVD: CVE-2015-2052

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201502-367

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-201502-367

CONFIGURATIONS

sources: JVNDB: JVNDB-2015-001592

PATCH

title:	DIR-645	url:	http://support.dlink.com/ProductInfo.aspx?m=DIR-645	Trust: 0.8
title:	SAP10051	url:	http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10051	Trust: 0.8
title:	D-Link DIR-645 Wired/Wireless Router Stack Buffer Overflow Vulnerability Patch	url:	https://www.cnvd.org.cn/patchInfo/show/55731	Trust: 0.6
title:	D-Link DIR-645 Wired/Wireless Router Repair measures for stack-based buffer error vulnerabilities	url:	http://123.124.177.30/web/xxk/bdxqById.tag?id=234989	Trust: 0.6

sources: CNVD: CNVD-2015-01376 // JVNDB: JVNDB-2015-001592 // CNNVD: CNNVD-201502-367

EXTERNAL IDS

db:	NVD	id:	CVE-2015-2052	Trust: 3.4
db:	DLINK	id:	SAP10051	Trust: 2.9
db:	BID	id:	72623	Trust: 2.6
db:	JVNDB	id:	JVNDB-2015-001592	Trust: 0.8
db:	CNNVD	id:	CNNVD-201502-367	Trust: 0.7
db:	CNVD	id:	CNVD-2015-01376	Trust: 0.6
db:	CNVD	id:	CNVD-2015-01332	Trust: 0.6
db:	VULHUB	id:	VHN-80013	Trust: 0.1

sources: CNVD: CNVD-2015-01376 // CNVD: CNVD-2015-01332 // VULHUB: VHN-80013 // BID: 72623 // JVNDB: JVNDB-2015-001592 // CNNVD: CNNVD-201502-367 // NVD: CVE-2015-2052

REFERENCES

url:	http://securityadvisories.dlink.com/security/publication.aspx?name=sap10051	Trust: 2.9
url:	http://www.securityfocus.com/bid/72623	Trust: 1.7
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-2052	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-2052	Trust: 0.8
url:	http://www.dlink.com/	Trust: 0.3

sources: CNVD: CNVD-2015-01376 // CNVD: CNVD-2015-01332 // VULHUB: VHN-80013 // BID: 72623 // JVNDB: JVNDB-2015-001592 // CNNVD: CNNVD-201502-367 // NVD: CVE-2015-2052

CREDITS

The vendor reported this issue.

Trust: 0.3

sources: BID: 72623

SOURCES

db:	CNVD	id:	CNVD-2015-01376
db:	CNVD	id:	CNVD-2015-01332
db:	VULHUB	id:	VHN-80013
db:	BID	id:	72623
db:	JVNDB	id:	JVNDB-2015-001592
db:	CNNVD	id:	CNNVD-201502-367
db:	NVD	id:	CVE-2015-2052

LAST UPDATE DATE

2024-11-23T22:18:26.345000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2015-01376	date:	2015-03-02T00:00:00
db:	CNVD	id:	CNVD-2015-01332	date:	2015-02-28T00:00:00
db:	VULHUB	id:	VHN-80013	date:	2016-12-31T00:00:00
db:	BID	id:	72623	date:	2015-07-15T00:17:00
db:	JVNDB	id:	JVNDB-2015-001592	date:	2015-02-25T00:00:00
db:	CNNVD	id:	CNNVD-201502-367	date:	2023-04-27T00:00:00
db:	NVD	id:	CVE-2015-2052	date:	2024-11-21T02:26:39.887

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2015-01376	date:	2015-03-02T00:00:00
db:	CNVD	id:	CNVD-2015-01332	date:	2015-02-28T00:00:00
db:	VULHUB	id:	VHN-80013	date:	2015-02-23T00:00:00
db:	BID	id:	72623	date:	2015-02-13T00:00:00
db:	JVNDB	id:	JVNDB-2015-001592	date:	2015-02-25T00:00:00
db:	CNNVD	id:	CNNVD-201502-367	date:	2015-02-27T00:00:00
db:	NVD	id:	CVE-2015-2052	date:	2015-02-23T17:59:09.243