CVE-2014-7859

Critical

Published: 25/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A stack-based buffer overflow exists in the D-Link firmware DNR-320L, DNS-320LW, DNR-322L, DNR-326, and DNS-327L in the login_mgr.cgi file. Remote attackers can execute arbitrary code by crafting malformed 'Host' and 'Referer' header values.

Risk Assessment

This vulnerability poses a serious security risk, allowing remote attackers to gain control over the device. It may lead to data loss or unauthorized access to the network.

Recommendation

It is recommended to update the firmware to the latest version to mitigate this vulnerability. Additionally, monitor network traffic for potential attack attempts.

Original NVD description (English source)

Stack-based buffer overflow in login_mgr.cgi in D-Link firmware DNR-320L and DNS-320LW before 1.04b08, DNR-322L before 2.10 build 03, DNR-326 before 2.10 build 03, and DNS-327L before 1.04b01 allows remote attackers to execute arbitrary code by crafting malformed "Host" and "Referer" header values.