Amaiil

**Name of the Vulnerable Software and Affected Versions** D-Link DIR-878 version 120B05 **Description** A stack-based buffer overflow exists within the WAN Settings component. The issue occurs when the `SetWan3Settings()` function processes the `Primary/Secondary` argument, which can be manipulated by a remote attacker to impact the confidentiality, integrity, and availability of the protected information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** D-Link DIR-823G version 1.0.2B05 20181207 **Description** A security flaw exists in the HNAP1 component that allows a remote attacker to cause a stack-based buffer overflow. This occurs through the manipulation of the `PAddress`, `SubnetMask`, or `Gateway` arguments within the `strcpy()` function of the `/HNAP1/SetStaticRouteSettings` endpoint. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to memory corruption and impacting confidentiality, integrity, and availability. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `/HNAP1/SetStaticRouteSettings` endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Tenda W20E version 15.11.0.61068 1546 841 CN TDC **Description** A stack-based buffer overflow exists in the HTTP Handler component. The issue occurs within the `formIPMacBindAdd()` function when processing the `IPMacBindRule` argument. This flaw allows a remote attacker to cause a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `formIPMacBindAdd()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Tenda W20E version 15.11.0.61068 1546 841 CN TDC **Description** A security flaw exists in the `formDelWebAuthWhiteUser()` function that allows a remote attacker to cause a stack-based buffer overflow. This occurs when the `webAuthWhiteUserIndex` argument is manipulated, potentially impacting the confidentiality, integrity, and availability of the protected information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the `formDelWebAuthWhiteUser()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** D-Link DIR-878 version 120B05 **Description** A stack-based buffer overflow exists in the Dynamic DNS IPv6 Settings component. This issue occurs when the `SetDynamicDNSIPv6Settings()` function improperly handles the `IPv6Address/Hostname` argument, allowing a remote attacker to compromise the confidentiality, integrity, and availability of the protected information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the `SetDynamicDNSIPv6Settings()` function to minimize the risk of exploitation.