Record status Published
Identifier year (not publication year) 2016
Source publication Jul 13, 2018
Source updated Aug 6, 2024
Imported by cveboard Oct 24, 2026
CNA source text (English) D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login action
Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action, Username, LoginPassword, and Captcha. The following products are affected: DIR-823, DIR-822, DIR-818L(W), DIR-895L, DIR-890L, DIR-885L, DIR-880L, DIR-868L, and DIR-850L.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
DIR-823
Vendor D-Link
Product DIR-823
Platforms Unknown
Default status Unknown
DIR-823 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) N/A unknownUnavailable Unavailable Unavailable None listed
DIR-822
Vendor D-Link
Product DIR-822
Platforms Unknown
Default status Unknown
DIR-822 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) N/A unknownUnavailable Unavailable Unavailable None listed
DIR-818L(W)
Vendor D-Link
Product DIR-818L(W)
Platforms Unknown
Default status Unknown
DIR-818L(W) · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) N/A unknownUnavailable Unavailable Unavailable None listed
DIR-895L
Vendor D-Link
Product DIR-895L
Platforms Unknown
Default status Unknown
DIR-895L · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) N/A unknownUnavailable Unavailable Unavailable None listed
DIR-890L
Vendor D-Link
Product DIR-890L
Platforms Unknown
Default status Unknown
DIR-890L · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) N/A unknownUnavailable Unavailable Unavailable None listed
DIR-885L
Vendor D-Link
Product DIR-885L
Platforms Unknown
Default status Unknown
DIR-885L · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) N/A unknownUnavailable Unavailable Unavailable None listed
DIR-880L
Vendor D-Link
Product DIR-880L
Platforms Unknown
Default status Unknown
DIR-880L · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) N/A unknownUnavailable Unavailable Unavailable None listed
DIR-868L
Vendor D-Link
Product DIR-868L
Platforms Unknown
Default status Unknown
DIR-868L · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) N/A unknownUnavailable Unavailable Unavailable None listed
DIR-850L
Vendor D-Link
Product DIR-850L
Platforms Unknown
Default status Unknown
DIR-850L · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) N/A unknownUnavailable Unavailable Unavailable None listed