critical9.8
CVE-2019-6258
D-Link DIR-822 Rev.Bx devices with firmware v.202KRb06 and older allow a buffer overflow via long MacAddress data in a /HNAP1/SetClientInfo HNAP protocol messa…
Impact
D-Link DIR-822 Rev.Bx devices with firmware v.202KRb06 and older allow a buffer overflow via long MacAddress data in a /HNAP1/SetClientInfo HNAP protocol message, which is mishandled in /usr/sbin/udhcpd during reading of the /var/servd/LAN-1-udhcpd.conf file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| D-Link | Dir-822 Firmware | through 2.02krb06 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/pr0v3rbs/CVE/tree/master/CVE-2019-6258
- https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10175
- https://github.com/pr0v3rbs/CVE/tree/master/CVE-2019-6258
- https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10175