Summary
generated automatically from NVD dataD-Link DIR-823G firmware 1.0.2B05_20181207 contains a stack-based buffer overflow in the HNAP1 component, in the /HNAP1/SetStaticRouteSettings handler. A strcpy call mishandles the PAddress, SubnetMask and Gateway arguments, and the flaw can be triggered remotely over the network. The issue is classified as CWE-119 and carries a CVSS v3.1 score of 9.9 (CRITICAL).
NVD description
A security flaw has been discovered in D-Link DIR-823G 1.0.2B05_20181207. The impacted element is the function strcpy of the file /HNAP1/SetStaticRouteSettings of the component HNAP1. The manipulation of the argument PAddress/SubnetMask/Gateway results in stack-based buffer overflow. The attack can be launched remotely.
EPSS · FIRST.org
0.91%probability of exploitation in the next 30 days
Higher than 59% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-16, recomputed daily by FIRST.org.
In-depth analysis on cveo.tech
We've published a detailed analysis of this CVE — exploitation, IOCs and mitigation.
CVSS v3.1 Score
Information
- Published
- 14 sept. 2026
- Updated
- 16 sept. 2026
- Status
- Deferred
- Source
- cna@vuldb.com
Weaknesses (CWE)
Similar CVEs
Other vulnerabilities of type CWE-119
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.