title: D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login action
description: Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action, Username, LoginPassword, and Captcha. The following products are affected: DIR-823, DIR-822, DIR-818L(W), DIR-895L, DIR-890L, DIR-885L, DIR-880L, DIR-868L, and DIR-850L.
problem types: CWE-121
affected:
{
product: DIR-823
vendor: D-Link
versions:
status: unknown, version: N/A
}
{
product: DIR-822
vendor: D-Link
versions:
status: unknown, version: N/A
}
{
product: DIR-818L(W)
vendor: D-Link
versions:
status: unknown, version: N/A
}
{
product: DIR-895L
vendor: D-Link
versions:
status: unknown, version: N/A
}
{
product: DIR-890L
vendor: D-Link
versions:
status: unknown, version: N/A
}
{
product: DIR-885L
vendor: D-Link
versions:
status: unknown, version: N/A
}
{
product: DIR-880L
vendor: D-Link
versions:
status: unknown, version: N/A
}
{
product: DIR-868L
vendor: D-Link
versions:
status: unknown, version: N/A
}
{
product: DIR-850L
vendor: D-Link
versions:
status: unknown, version: N/A
}
