Description
A flaw has been found in D-Link DIR-600L 2.17b02. Affected by this issue is the function hnap_main of the file htdocs/cgibin of the component HNAP Handler. Executing a manipulation can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been published and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| D-Link | DIR-600L | 2.17b02 | — |
References
- VDB-437417 | D-Link DIR-600L HNAP cgibin hnap_main stack-based overflow vdb-entry technical-description
- VDB-437417 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-129354 | CVE Analysis and Report third-party-advisory
- Submit #1043526 | D-Link DIR-600L 2.17b02 Stack-based Buffer Overflow third-party-advisory
- https://github.com/ruanyi101/router-firmware-security-advisories/blob/main/router-firmware-GitHub-advisories/advisories/D-Link-DIR-600L-HNAP-SOAPAction.md exploit
- https://www.dlink.com/ product