PT-2026-49083 · D Link · Dcs-935L
CVSS v2.0
9.0
High
| Vector | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
D-Link DCS-935L version 1.10.01
Description
A format string issue exists in the HTTP Handler component within the file '/web/cgi-bin/greece/rhea'. The problem occurs in the
snprintf() function when the data argument is manipulated, allowing a remote attack to be launched.Recommendations
For version 1.10.01, apply available patches. As a temporary workaround, restrict access to the '/web/cgi-bin/greece/rhea' endpoint to minimize the risk of exploitation.
Exploit
Fix
RCE
Buffer Overflow
Use of Externally-Controlled Format String
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Dcs-935L