Security Advisory
CVE-2018-20305
9.8
CRITICAL
Vulnerability Description
D-Link DIR-816 A2 1.10 B05 devices allow arbitrary remote code execution without authentication via the newpass parameter. In the /goform/form2userconfig.cgi handler function, a long password may lead to a stack-based buffer overflow and overwrite a return address.
Published Date
December 20, 2018
Official Source
NIST NVD Advisory