ID

VAR-202309-2878


CVE

CVE-2020-19318


DESCRIPTION

Buffer Overflow vulnerability in D-Link DIR-605L, hardware version AX, firmware version 1.17beta and below, allows authorized attackers execute arbitrary code via sending crafted data to the webserver service program.

Trust: 1.0

sources: NVD: CVE-2020-19318

AFFECTED PRODUCTS

vendor:dlinkmodel:dir-605lscope:lteversion:1.17b01

Trust: 1.0

sources: NVD: CVE-2020-19318

CVSS

SEVERITY

CVSSV2

CVSSV3

NVD: CVE-2020-19318
value: HIGH

Trust: 1.0

NVD:
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 2.8
impactScore: 5.9
version: 3.1

Trust: 1.0

sources: NVD: CVE-2020-19318

PROBLEMTYPE DATA

problemtype:CWE-787

Trust: 1.0

sources: NVD: CVE-2020-19318

EXTERNAL IDS

db:NVDid:CVE-2020-19318

Trust: 1.0

sources: NVD: CVE-2020-19318

REFERENCES

url:https://github.com/hhhhu8045759/dir_605l-stack-overflow/blob/master/readme.md

Trust: 1.0

sources: NVD: CVE-2020-19318

SOURCES

db:NVDid:CVE-2020-19318

LAST UPDATE DATE

2023-12-18T12:25:00.352000+00:00


SOURCES UPDATE DATE

db:NVDid:CVE-2020-19318date:2023-09-13T19:00:55.933

SOURCES RELEASE DATE

db:NVDid:CVE-2020-19318date:2023-09-11T18:15:09.107