CVE-2017-14948

Certain D-Link products are affected by: Buffer Overflow. This affects DIR-880L 1.08B04 and DIR-895 L/R 1.13b03. The impact is: execute arbitrary code (remote). The component is: htdocs/fileaccess.cgi. The attack vector is: A crafted HTTP request handled by fileacces.cgi could allow an attacker to mount a ROP attack: if the HTTP header field CONTENT_TYPE starts with ''boundary=' followed by more than 256 characters, a buffer overflow would be triggered, potentially causing code execution.

• CWE-120

• https://github.com/badnack/d_link_880_bug/blob/master/README.mdExploit, Third Party Advisory
• https://github.com/badnack/d_link_880_bug/blob/master/README.mdExploit, Third Party Advisory

Published

Oct 14, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14942Intelbras WRN 150 devices allow remote attackers to read the…
• CVE-2017-14943Trapeze TransitMaster is vulnerable to information disclosur…
• CVE-2017-14944Inedo ProGet before 4.7.14 does not properly address dangero…
• CVE-2017-14945Artifex GSView 6.0 Beta on Windows allows attackers to cause…
• CVE-2017-14946Artifex GSView 6.0 Beta on Windows allows attackers to cause…
• CVE-2017-14947Artifex GSView 6.0 Beta on Windows allows attackers to execu…
• CVE-2017-14949Restlet Framework before 2.3.12 allows remote attackers to a…
• CVE-2017-1495IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could …
• CVE-2017-14952Double free in i18n/zonemeta.cpp in International Components…
• CVE-2017-14953HikVision Wi-Fi IP cameras, when used in a wired configurati…
• CVE-2017-14954The waitid implementation in kernel/exit.c in the Linux kern…
• CVE-2017-14955Check_MK before 1.2.8p26 mishandles certain errors within th…5.9