An issue was discovered in /bin/mini_upnpd on D-Link DIR-619L 2.06beta devices. There is a heap buffer overflow allowing remote attackers to restart router via the M-search request ST parameter. No authentication required
References
| Link | Resource |
|---|---|
| https://github.com/hhhhu8045759/619L_upnpd_heapoverflow | Exploit Third Party Advisory |
| https://www.dlink.com/en/security-bulletin/ | Product |
| https://github.com/hhhhu8045759/619L_upnpd_heapoverflow | Exploit Third Party Advisory |
| https://www.dlink.com/en/security-bulletin/ | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 05:09
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/hhhhu8045759/619L_upnpd_heapoverflow - Exploit, Third Party Advisory | |
| References | () https://www.dlink.com/en/security-bulletin/ - Product |
13 Sep 2023, 19:04
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-787 | |
| First Time |
Dlink dir-619l
Dlink dir-619l Firmware Dlink |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CPE | cpe:2.3:h:dlink:dir-619l:-:*:*:*:*:*:*:* cpe:2.3:o:dlink:dir-619l_firmware:2.06:beta:*:*:*:*:*:* |
|
| References | (MISC) https://www.dlink.com/en/security-bulletin/ - Product | |
| References | (MISC) https://github.com/hhhhu8045759/619L_upnpd_heapoverflow - Exploit, Third Party Advisory |
11 Sep 2023, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-09-11 19:15
Updated : 2024-11-21 05:09
NVD link : CVE-2020-19323
Mitre link : CVE-2020-19323
CVE.ORG link : CVE-2020-19323
JSON object : View
Products Affected
dlink
- dir-619l_firmware
- dir-619l
CWE
CWE-787
Out-of-bounds Write