CVE-2017-3193
HIGH
8.8
CVSS Score
Published: December 15, 2017 at 02:00 PM UTC
Updated: June 17, 2026 at 01:17 AM UTC
2 products affected across 1 vendorDir 850L FirmwareDir-850L
Using DIR-850L and potentially others by D-Link?
Get instant alerts when new vulnerabilities affect DIR-850L and potentially others - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
HIGH8.8
Exploit prediction
EPSS 6%
Description
Multiple D-Link devices including the DIR-850L firmware versions 1.14B07 and 2.07.B05 contain a stack-based buffer overflow vulnerability in the web administration interface HNAP service.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (5)
VDB Entryx_refsource_BIDThird Party Advisory
Source: [email protected]
http://www.securityfocus.com/bid/96747x_refsource_MISCPatchThird Party Advisory
Source: [email protected]
https://tools.cisco.com/security/center/viewAlert.x?alertId=52967x_refsource_MISCThird Party Advisory
Source: [email protected]
https://twitter.com/NCCGroupInfosec/status/845269159277723649Third Party Advisoryx_refsource_CERT-VNUS Government ResourceVDB Entry
Source: [email protected]
https://www.kb.cert.org/vuls/id/305448x_refsource_MISCThird Party Advisory
Source: [email protected]
https://www.nccgroup.trust/uk/our-research/d-link-dir-850l-web-admin-interface-vulnerable-to-stack-based-buffer-overflow/?research=Technical+advisoriesCVSS
- Attack Vector
- ADJACENT_NETWORK
- Complexity
- LOW
- Privileges
- NONE
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- HIGH
- Integrity
- HIGH
- Availability
- HIGH
Vector?
Quick Info
StatusMODIFIED
CWE
CWE-121CWE-119
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card