Skip to content
Sign in
CVE-2016-6563Not scoredCWE-121

CVE-2016-6563: D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login action

D-Link · DIR-823

Affected: D-Link DIR-823 · Exploitation: likely to be exploited (10% or more)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

79.7%probability of exploitation in the next 30 days
99th percentile
050100

Higher than 99% of scored CVEs

Not scored yet. The CVE record carries no CVSS score.

DescriptionCVE.org

Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action, Username, LoginPassword, and Captcha. The following products are affected: DIR-823, DIR-822, DIR-818L(W), DIR-895L, DIR-890L, DIR-885L, DIR-880L, DIR-868L, and DIR-850L.

Affected products9

From the CVE record. A product or version that is not listed is unknown, not unaffected.

  • D-Link · DIR-823Versions not stated
  • D-Link · DIR-822Versions not stated
  • D-Link · DIR-818L(W)Versions not stated
  • D-Link · DIR-895LVersions not stated
  • D-Link · DIR-890LVersions not stated
  • D-Link · DIR-885LVersions not stated
  • D-Link · DIR-880LVersions not stated
  • D-Link · DIR-868LVersions not stated
  • D-Link · DIR-850LVersions not stated

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas
Exploitation
Likely to be exploited (10% or more). EPSS gives it a 10% or higher chance of exploitation in the next 30 days.
CISA KEV
Not listed
Public check
No public nuclei template
Vendor
D-Link
Published
July 2018

CoverageNo articles yet

No CyberSIXT article names CVE-2016-6563 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References

Updated AboutDevelopersSign in