CVE-2018-8941

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-04-03 · updated 2026-06-17
Weakness: CWE-119

Description

Diagnostics functionality on D-Link DSL-3782 devices with firmware EU v. 1.01 has a buffer overflow, allowing authenticated remote attackers to execute arbitrary code via a long Addr value to the 'set Diagnostics_Entry' function in an HTTP request, related to /userfs/bin/tcapi.

Affected products

D-Link Dsl-3782 Firmware: 1.01

References

https://github.com/SECFORCE/CVE-2018-8941
https://github.com/SECFORCE/CVE-2018-8941

Get alerted when CVE-2018-8941 or the next vulnerability affects your stack