CVE-2017-17065

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-11-30 · updated 2026-06-17
Weakness: CWE-20

Description

An issue was discovered on D-Link DIR-605L Model B before FW2.11betaB06_hbrf devices, related to the code that handles the authentication values for HNAP. An attacker can cause a denial of service (device crash) or possibly have unspecified other impact by sending a sufficiently long string in the password field of the HTTP Basic Authentication section of the HTTP request.

Affected products

Dlink Dir-605L Model B Firmware: before fw2.11betab06_hbrf — fixed in fw2.11betab06_hbrf

How to fix

Upgrade to a fixed version: Dlink Dir-605L Model B Firmware fw2.11betab06_hbrf. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2017-17065 or the next vulnerability affects your stack