Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2014-4927

Buffer overflow in ACME micro_httpd, as used in D-Link DSL2750U and DSL2740U and NetGear WGR614 and MR-ADSL-DG834 routers allows remote attackers to cause a denial of service (crash) via a long string in the URI in a GET request.

Published

2014-07-24T14:55:09.520

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.8 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

6.9

Weaknesses
  • Type: Primary
    CWE-119
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application acme micro_httpd - Yes
Hardware dlink dsl2740u - Yes
Hardware dlink dsl2750u - Yes
Hardware netgear mr-adsl-dg834 - Yes
Hardware netgear wgr614 v1 Yes
Hardware netgear wgr614 v2 Yes
Hardware netgear wgr614 v3 Yes
Hardware netgear wgr614 v4 Yes
Hardware netgear wgr614 v5 Yes
Hardware netgear wgr614 v6 Yes
Hardware netgear wgr614 v7 Yes
Hardware netgear wgr614 v8 Yes
Hardware netgear wgr614 v9 Yes
References