CVE-2017-14948

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2019-10-14 · updated 2026-06-17
Weakness: CWE-120

Description

Certain D-Link products are affected by: Buffer Overflow. This affects DIR-880L 1.08B04 and DIR-895 L/R 1.13b03. The impact is: execute arbitrary code (remote). The component is: htdocs/fileaccess.cgi. The attack vector is: A crafted HTTP request handled by fileacces.cgi could allow an attacker to mount a ROP attack: if the HTTP header field CONTENT_TYPE starts with ''boundary=' followed by more than 256 characters, a buffer overflow would be triggered, potentially causing code execution.

Affected products

D-Link DIR-868L: all versions
D-Link DIR-880L: 1.08b04
Dlink Dir-885L Firmware: all versions
D-Link DIR-890L: all versions
Dlink Dir-895L Firmware: 1.13b03
Dlink Dir-895R Firmware: 1.13b03

References

https://github.com/badnack/d_link_880_bug/blob/master/README.md
https://github.com/badnack/d_link_880_bug/blob/master/README.md

Get alerted when CVE-2017-14948 or the next vulnerability affects your stack