Details of VAR-201511-0386

ID

VAR-201511-0386

TITLE

D-Link DIR-825 has multiple vulnerabilities

Trust: 0.6

sources: CNVD: CNVD-2015-07855

DESCRIPTION

Dlink DIR-825 is a wireless router product from D-Link. A buffer overflow vulnerability and a directory traversal vulnerability exist in Dlink DIR-825. An attacker could use these vulnerabilities to execute arbitrary code in the context of an affected device, obtain sensitive information, and possibly cause a denial of service. Dlink DIR-825 is prone to multiple buffer-overflow vulnerabilities and a directory-traversal vulnerability. Failed exploits may result in denial-of-service conditions

Trust: 1.35

sources: CNVD: CNVD-2015-07855 // CNNVD: CNNVD-201511-365 // BID: 77596

IOT TAXONOMY

category:

['IoT', 'Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2015-07855

AFFECTED PRODUCTS

vendor:	d link	model:	dir-825	scope:	-	version:	-	Trust: 0.6
vendor:	d link	model:	dir-825	scope:	eq	version:	0	Trust: 0.3

sources: CNVD: CNVD-2015-07855 // BID: 77596

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD:	CNVD-2015-07855
value:	HIGH
Trust: 0.6

CNVD:	CNVD-2015-07855
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

sources: CNVD: CNVD-2015-07855

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201511-365

TYPE

Boundary Condition Error

Trust: 0.3

sources: BID: 77596

EXTERNAL IDS

db:	BID	id:	77596	Trust: 1.5
db:	CNVD	id:	CNVD-2015-07855	Trust: 0.6
db:	CNNVD	id:	CNNVD-201511-365	Trust: 0.6

sources: CNVD: CNVD-2015-07855 // BID: 77596 // CNNVD: CNNVD-201511-365

REFERENCES

url:	http://www.securityfocus.com/bid/77596	Trust: 1.2
url:	http://www.dlink.com/	Trust: 0.3
url:	http://seclists.org/bugtraq/2015/nov/71	Trust: 0.3

sources: CNVD: CNVD-2015-07855 // BID: 77596 // CNNVD: CNNVD-201511-365

CREDITS

Samuel Huntley

Trust: 0.9

sources: BID: 77596 // CNNVD: CNNVD-201511-365

SOURCES

db:	CNVD	id:	CNVD-2015-07855
db:	BID	id:	77596
db:	CNNVD	id:	CNNVD-201511-365

LAST UPDATE DATE

2022-05-17T01:41:10.830000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2015-07855	date:	2015-11-30T00:00:00
db:	BID	id:	77596	date:	2015-12-08T22:09:00
db:	CNNVD	id:	CNNVD-201511-365	date:	2015-11-20T00:00:00

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2015-07855	date:	2015-11-30T00:00:00
db:	BID	id:	77596	date:	2015-11-13T00:00:00
db:	CNNVD	id:	CNNVD-201511-365	date:	2015-11-20T00:00:00