Lucene search
HistoryMar 15, 2023 - 7:15 p.m.
CVE-2023-25282
d-link
heap overflow
denial of service
mydlink_api.ccp
config.log_to_syslog
log_opt_droppackets
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
30.5%
A heap overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of service via the config.log_to_syslog and log_opt_dropPackets parameters to mydlink_api.ccp.
Affected configurations
Node
dlinkdir-820l_firmwareMatch1.06b02
dlinkdir-820lMatcha1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dlink | dir-820l_firmware | 1.06 | cpe:2.3:o:dlink:dir-820l_firmware:1.06:b02:*:*:*:*:*:* |
| dlink | dir-820l | a1 | cpe:2.3:h:dlink:dir-820l:a1:*:*:*:*:*:*:* |
Related
prion
prion
Heap overflow
2023-03-15 19:15:00
cvelist
cvelist
CVE-2023-25282
2023-03-15 00:00:00
cve
cve
CVE-2023-25282
2023-03-15 19:15:24
openvas
openvas
D-Link DIR-820L Devices Multiple Vulnerabilities (Mar 2023)
2023-03-14 00:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
30.5%
Related for NVD:CVE-2023-25282