CVE-2018-20305 | BDVDB-2026-110755 Detail

Description#

D-Link DIR-816 A2 1.10 B05 devices allow arbitrary remote code execution without authentication via the newpass parameter. In the /goform/form2userconfig.cgi handler function, a long password may lead to a stack-based buffer overflow and overwrite a return address.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/RootSoull/Vuln-Poc/tree/master/D-Link/DIR-816

Exploit#

No public exploit known

History#

Version 12018-12-20Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.