CVE-2017-17065
High
Description
An issue was discovered on D-Link DIR-605L Model B before FW2.11betaB06_hbrf devices, related to the code that handles the authentication values for HNAP. An attacker can cause a denial of service (device crash) or possibly have unspecified other impact by sending a sufficiently long string in the password field of the HTTP Basic Authentication section of the HTTP request.
SeverityHigh
CVSS7.5
Exploit probability—
ProductDlink Dir-605l Model B Firmware
PublishedNov 30, 2017
First seenNov 30, 2017
How to fix
Update
- dlink dir-605l_model_b_firmwarefw2.11betab06_hbrf or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dlink dir-605l_model_b_firmware | v < fw2.11betab06_hbrf | fw2.11betab06_hbrf |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.