CVE-2014-7858

Published: Aug 25, 2017

Modified: Aug 6, 2024

PUBLISHED

Description

The check_login function in D-Link DNR-326 before 2.10 build 03 allows remote attackers to bypass authentication and log in by setting the username cookie parameter to an arbitrary string.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://packetstormsecurity.com/files/132075/D-Link-Bypass-Buffer-Overflow.html

x_refsource_MISC

20150528 [SEARCH-LAB advisory] More than fifty vulnerabilities in D-Link NAS and NVR devices

mailing-list

x_refsource_BUGTRAQ

74886

vdb-entry

x_refsource_BID

20150531 [SEARCH-LAB advisory] More than fifty vulnerabilities in D-Link NAS and NVR devices

mailing-list

x_refsource_FULLDISC

http://www.search-lab.hu/media/D-Link_Security_advisory_3_0_public.pdf

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2014-7858

Description

Affected Products

References