CVE-2016-5681Not scored

CVE-2016-5681

Vendor not yet named

Vendor fix available · Exploitation: not established

ExploitationNot established

Not in CISA KEV as of catalogue 2026.11.13 (13 Nov)

In CISA KEV: not seen
Exploited (reported): not seen
Scanning observed: not seen
Proof of concept public: not seen
Not establishedNothing in the sources we check

11.9%probability of exploitation in the next 30 days

96th percentile

050100

Higher than 96% of scored CVEs

Not scored yet. NVD has not published a CVSS score.

DescriptionNVD

Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR-822 C1 3.01 before 3.01WWb02, DIR-823 A1 1.00 before 1.00WWb05, DIR-895L A1 1.11 before 1.11WWb04, DIR-890L A1 1.09 before 1.09b14, DIR-885L A1 1.11 before 1.11WWb07, DIR-880L A1 1.07 before 1.07WWb08, DIR-868L B1 2.03 before 2.03WWb01, and DIR-868L C1 3.00 before 3.00WWb01 devices allows remote attackers to execute arbitrary code via a long session cookie.

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Likely to be exploited (10% or more). EPSS gives it a 10% or higher chance of exploitation in the next 30 days.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Memory Buffer Bounds · Memory Corruption
Vendor: D-Link
Published: August 2016
Band: Likely to be exploited (10% or more), August 2016

Coverage1 article · 1 outlet

First in our coverage: SecurityOnline, 23 Jun.

23 Jun 09:29
AryStinger malware hijacks over 4,300 outdated routers in Asia
SecurityOnline · first in our coverage · mentions it in passing

New articles also arrive in the RSS feed.