Exploitation Summary
EIP tracks 2 public exploits for CVE-2014-3936.
PoCs published by Metasploit, Craig Heffner, including Metasploit module exploits/linux/http/dlink_hnap_bof.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in D-Link devices via a malicious HTTP POST request to the HNAP handler, achieving remote code execution. It supports multiple targets and includes automatic fingerprinting for version detection.
Description
Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev. A1) with firmware 1.01b06 and earlier, DIR-505 with firmware before 1.08b10, and DIR-505L with firmware 1.01 and earlier allows remote attackers to execute arbitrary code via a long Content-Length header in a GetDeviceSettings action in an HNAP request.
Exploits (2)
This Metasploit module exploits a stack-based buffer overflow in D-Link devices via a malicious HTTP POST request to the HNAP handler, achieving remote code execution. It supports multiple targets and includes automatic fingerprinting for version detection.
This Metasploit module exploits a stack-based buffer overflow in D-Link HNAP request handling to achieve remote code execution. It targets specific D-Link devices (DSP-W215, DIR-505) by sending a maliciously crafted HTTP POST request to overflow the stack and redirect execution to a system() call.