CVE-2018-10713

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'read' parameter to the '/userfs/bin/tcapi' binary (in the Diagnostics component) using the 'read <node_name>' function and cause memory corruption. Furthermore, it is possible to redirect the flow of the program and execute arbitrary code.

• CWE-119

• https://github.com/kgsdy/D-Link-DSL-3782-EUExploit, Third Party Advisory
• https://github.com/kgsdy/D-Link-DSL-3782-EUExploit, Third Party Advisory

Published

May 3, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-10706An integer overflow in the transferMulti function of a smart…
• CVE-2018-10709The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASR…
• CVE-2018-1071zsh through version 5.4.2 is vulnerable to a stack-based buf…5.5
• CVE-2018-10710The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASR…
• CVE-2018-10711The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASR…
• CVE-2018-10712The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASR…
• CVE-2018-10716An issue was discovered in Shanghai 2345 Security Guard 3.7.…
• CVE-2018-10717The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0…
• CVE-2018-10718Stack-based buffer overflow in Activision Infinity Ward Call…
• CVE-2018-1072ovirt-engine before version ovirt 4.2.2 is vulnerable to an …5
• CVE-2018-10722In Cylance CylancePROTECT before 1470, an unprivileged local…
• CVE-2018-10723Directus 6.4.9 has a hardcoded admin password for the Admin …