Lucene search

[email protected]CVE-2011-3992

HistoryNov 03, 2011 - 5:55 p.m.

CVE-2011-3992

2011-11-0317:55:01

CWE-119

[email protected]

web.nvd.nist.gov

cve-2011-3992

buffer overflow

ssh server

d-link

des-3800

dwl-2100ap

dwl-3200ap

remote code execution

denial of service

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.4 High

AI Score

Confidence

Low

0.092 Low

EPSS

Percentile

94.7%

JSON

Buffer overflow in the SSH server functionality on the D-Link DES-3800 with firmware before 4.50B052, DWL-2100AP with firmware before 2.50RC548, and DWL-3200AP with firmware before 2.55RC549 allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors.

Affected configurations

NVD

Node

dlinkdes-3800

AND

dlinkdes-3800_firmwareRange≤4.50

dlinkdes-3800_firmwareMatch4.00

Node

dlinkdwl-2100ap

AND

dlinkdwl-2100ap_firmwareRange≤2.50

Node

dlinkdwl-3200ap

AND

dlinkdwl-3200ap_firmwareRange≤2.55

dlinkdwl-3200ap_firmwareMatch2.40

CPENameOperatorVersion
dlink:des-3800dlink des-3800eq*
dlink:des-3800_firmwaredlink des-3800 firmwarele4.50
dlink:des-3800_firmwaredlink des-3800 firmwareeq4.00

CPE	Name	Operator	Version
dlink:des-3800	dlink des-3800	eq	*
dlink:des-3800_firmware	dlink des-3800 firmware	le	4.50
dlink:des-3800_firmware	dlink des-3800 firmware	eq	4.00

References

jvn.jp/en/jp/JVN72640744/index.html

jvndb.jvn.jp/jvndb/JVNDB-2011-000092

osvdb.org/76628

www.dlink-jp.com/page/sc/F/security_info20111028.html

www.securityfocus.com/bid/50405

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.4 High

AI Score

Confidence

Low

0.092 Low

EPSS

Percentile

94.7%

JSON

Related for CVE-2011-3992

jvn1 cvelist1 prion1 nvd1