Vulnerability Details : CVE-2016-6563

Metasploit modules for CVE-2016-6563

• Dlink DIR Routers Unauthenticated HNAP Login Stack Buffer Overflow

  Disclosure Date: 2016-11-07

  First seen: 2020-04-26

  exploit/linux/http/dlink_hnap_login_bof

  Several Dlink routers contain a pre-authentication stack buffer overflow vulnerability, which is exposed on the LAN interface on port 80. This vulnerability affects the HNAP SOAP protocol, which accepts arbitrarily long strings into certain XML parameters and then copies the

  More information

CVSS scores for CVE-2016-6563

CWE ids for CVE-2016-6563

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
  The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
  Assigned by: nvd@nist.gov (Primary)
• CWE-121 Stack-based Buffer Overflow
  A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
  Assigned by: cret@cert.org (Secondary)

References for CVE-2016-6563

Products affected by CVE-2016-6563