EIP-2026-101230
PRE-CVED-Link DIR-645 - Multiple UPNP Vulnerabilities
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-101230. PoCs published by Samuel Huntley.
AI-analyzed exploit summary The exploit demonstrates a buffer overflow and command injection vulnerability in D-Link DIR-645 routers via crafted HNAP1 SOAPAction requests. The PoC includes functional Python code for both exploits, with the buffer overflow leveraging ROP techniques on MIPS little-endian architecture.
Description
D-Link DIR-645 - Multiple UPNP Vulnerabilities
Exploits (1)
The exploit demonstrates a buffer overflow and command injection vulnerability in D-Link DIR-645 routers via crafted HNAP1 SOAPAction requests. The PoC includes functional Python code for both exploits, with the buffer overflow leveraging ROP techniques on MIPS little-endian architecture.