CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-14429

The DHCP client on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices allows unauthenticated remote code execution as root because /etc/services/INET/inet_ipv4.php mishandles shell metacharacters, affecting generated files such as WAN-1-udhcpc.sh.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.025

EPSS Ranking 84.8%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 10.0

References

Products affected by CVE-2017-14429

Dlink » Dir-850l » Version: N/A

cpe:2.3:h:dlink:dir-850l:-
Dlink » Dir-850l Firmware » Version: N/A

cpe:2.3:o:dlink:dir-850l_firmware:-
Dlink » Dir-850l Firmware » Version: 1.02

cpe:2.3:o:dlink:dir-850l_firmware:1.02
Dlink » Dir-850l Firmware » Version: 1.08b03

cpe:2.3:o:dlink:dir-850l_firmware:1.08b03
Dlink » Dir-850l Firmware » Version: 1.08trb03

cpe:2.3:o:dlink:dir-850l_firmware:1.08trb03
Dlink » Dir-850l Firmware » Version: 1.09

cpe:2.3:o:dlink:dir-850l_firmware:1.09
Dlink » Dir-850l Firmware » Version: 1.14b07

cpe:2.3:o:dlink:dir-850l_firmware:1.14b07
Dlink » Dir-850l Firmware » Version: 1.21b07

cpe:2.3:o:dlink:dir-850l_firmware:1.21b07
Dlink » Dir-850l Firmware » Version: 2.06

cpe:2.3:o:dlink:dir-850l_firmware:2.06
Dlink » Dir-850l Firmware » Version: 2.07.b05

cpe:2.3:o:dlink:dir-850l_firmware:2.07.b05
Dlink » Dir-850l Firmware » Version: 2.21b01

cpe:2.3:o:dlink:dir-850l_firmware:2.21b01
Dlink » Dir-850l Firmware » Version: 2.22b02

cpe:2.3:o:dlink:dir-850l_firmware:2.22b02
Dlink » Dir-850l Firmware » Version: fw114wwb07_h2ab

cpe:2.3:o:dlink:dir-850l_firmware:fw114wwb07_h2ab
Dlink » Dir-850l Firmware » Version: fw208wwb02

cpe:2.3:o:dlink:dir-850l_firmware:fw208wwb02

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-14429

Products

Pricing

Contact Us