NetSight
IP …
high7.5Public exploit code

CVE-2006-3687

Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in D-Link DI-524, DI-604 Broadband Router, DI-624, D-Link DI-784, WBR-1310 Wireless G…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in D-Link DI-524, DI-604 Broadband Router, DI-624, D-Link DI-784, WBR-1310 Wireless G Router, WBR-2310 RangeBooster G Router, and EBR-2310 Ethernet Broadband Router allows remote attackers to execute arbitrary code via a long M-SEARCH request to UDP port 1900.

Affected products

VendorProductAffected versions
D-LinkDi-604 Broadband Router
All versions
D-LinkDi-784
All versions
D-LinkEbr-2310 Ethernet Broadband Router
All versions
D-LinkWbr-1310 Wireless G Router
All versions
D-LinkWbr-2310 Rangebooster G Router
All versions
DlinkDi-524
All versions
DlinkDi-624
All versions

References