CVE-2011-3992

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-11-03 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in the SSH server functionality on the D-Link DES-3800 with firmware before 4.50B052, DWL-2100AP with firmware before 2.50RC548, and DWL-3200AP with firmware before 2.55RC549 allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors.

Affected products

Dlink Des-3800: all versions
Dlink Des-3800 Firmware: through 4.50; 4.00
Dlink Dwl-2100Ap: all versions
Dlink Dwl-2100Ap Firmware: through 2.50
Dlink Dwl-3200Ap: all versions
Dlink Dwl-3200Ap Firmware: through 2.55; 2.40

References

http://jvn.jp/en/jp/JVN72640744/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2011-000092
http://osvdb.org/76628
http://www.dlink-jp.com/page/sc/F/security_info20111028.html
http://www.securityfocus.com/bid/50405
http://jvn.jp/en/jp/JVN72640744/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2011-000092
http://osvdb.org/76628
http://www.dlink-jp.com/page/sc/F/security_info20111028.html
http://www.securityfocus.com/bid/50405

Get alerted when CVE-2011-3992 or the next vulnerability affects your stack