[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5G4gNyDO099RRQW2_ELSkSSew1xsH2Wr1toYbtUVMQk":3,"g5a-risk:CVE-2012-10021":149},{"success":4,"data":5,"meta":146},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":32,"epssPercentile":27,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":46,"references":47,"referencesCount":71,"weaknesses":72,"weaknessesCount":81,"isActivelyExploited":45,"cisaInfo":27,"otxData":27,"relatedBlogPosts":82,"seoMetadata":83,"configurations":108,"relatedVendorCves":123,"notableEvents":124},"CVE-2012-10021","What is CVE-2012-10021?","A stack-based buffer overflow vulnerability exists in D-Link DIR-605L Wireless N300 Cloud Router firmware versions 1.12 and 1.13 via the getAuthCode() function. The flaw arises from unsafe usage of sprintf() when processing user-supplied CAPTCHA data via the FILECODE parameter in \u002Fgoform\u002FformLogin. A remote unauthenticated attacker can exploit this to execute arbitrary code with root privileges on the device.","A stack-based buffer overflow vulnerability exists in D-Link DIR-605L Wireless N300 Cloud Router firmware versions 1.12 and 1.13 via the getAuthCode() functi...","2025-07-31T15:15:32.597","2025-09-23T17:45:55.843",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":31,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[],[],0.04443,[32,32,32,32,32,32,32],"Critical",[36,41],{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"dlink","dir-605l_firmware","*","cpe:2.3:o:dlink:dir-605l_firmware:*:*:*:*:*:*:*:*",{"vendor":37,"product":42,"version":43,"criteria":44,"vulnerable":45},"dir-605l","-","cpe:2.3:h:dlink:dir-605l:-:*:*:*:*:*:*:*",false,2,[48,53,58,63,67],{"url":49,"source":50,"tags":51},"https:\u002F\u002Fforums.dlink.com\u002Findex.php?topic=51923.0","Dlink",[52],"Issue Tracking",{"url":54,"source":55,"tags":56},"https:\u002F\u002Fraw.githubusercontent.com\u002Frapid7\u002Fmetasploit-framework\u002Fmaster\u002Fmodules\u002Fexploits\u002Flinux\u002Fhttp\u002Fdlink_dir605l_captcha_bof.rb","Githubusercontent",[57],"Exploit",{"url":59,"source":60,"tags":61},"https:\u002F\u002Fweb.archive.org\u002Fweb\u002F20121012062554\u002Fhttp:\u002F\u002Fwww.devttys0.com\u002F2012\u002F10\u002Fexploiting-a-mips-stack-overflow\u002F","Archive",[57,62],"Third Party Advisory",{"url":64,"source":65,"tags":66},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F29127","Exploit-db",[57],{"url":68,"source":69,"tags":70},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fdlink-dir605l-captcha-handling-stack-based-buffer-overflow","Vulncheck",[62],5,[73],{"id":74,"name":75,"description":76,"extendedDescription":77,"status":78,"abstraction":79,"structure":80},"CWE-121","Stack-based Buffer Overflow","A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).","","Draft","Variant","Simple",1,[],{"title":84,"metaDescription":85,"keywords":86,"canonicalUrl":87,"structuredData":88},"What is CVE-2012-10021? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2012-10021, a critical severity cyber security vulnerability from 2025. A stack-based buffer overflow vulnerability exists in D...","CVE-2012-10021, CVE-2012-10021 vulnerability, CVE-2012-10021 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, dlink security, dir-605l_firmware vulnerability, dir-605l vulnerability","\u002Fwhat-is\u002Fcve-2012-10021",{"@context":89,"@type":90,"headline":84,"description":85,"datePublished":10,"dateModified":11,"author":91,"publisher":95,"about":99,"mainEntityOfPage":103,"articleSection":106,"keywords":107},"https:\u002F\u002Fschema.org","TechArticle",{"@type":92,"name":93,"url":94},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":92,"name":93,"url":94,"logo":96},{"@type":97,"url":98},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":100,"name":6,"description":101,"additionalType":102},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":104,"@id":105},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2012-10021","Cybersecurity","CVE-2012-10021, CVE-2012-10021 vulnerability, CVE-2012-10021 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[109],{"Operator":110,"Negate":27,"Nodes":111},"AND",[112,119],{"Operator":113,"Negate":45,"CPEMatch":114},"OR",[115],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":116,"VersionStartExcluding":27,"VersionStartIncluding":117,"VersionEndExcluding":27,"VersionEndIncluding":118},"5DEC5108-2DAB-4F09-A0A1-917FD604235B","1.12","1.13",{"Operator":113,"Negate":45,"CPEMatch":120},[121],{"Vulnerable":45,"Criteria":44,"MatchCriteriaID":122,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"CD4E3AA2-EC1C-4219-8E13-B52D30A7FA06",[],[125,132,139],{"id":126,"eventType":127,"eventTime":128,"details":129,"label":130,"color":131},"76bdccaf-7b1c-4d68-a70f-29f28cabc002","NEW_NVD","2025-08-01T13:32:23.13018+00:00","New CVE added to NVD","Published to NVD","blue",{"id":133,"eventType":134,"eventTime":135,"details":136,"label":137,"color":138},"dbcd402a-e72f-4d2c-aef5-8cbc7f646eb3","HIGH_EPSS_DELTA","2025-10-09T04:07:20.793875+00:00","Daily EPSS score increased by 0.589 on 2025-08-01","EPSS Score Increased","red",{"id":140,"eventType":141,"eventTime":142,"details":143,"label":144,"color":145},"0f5fb93d-f7e3-4a99-a770-6818324be1be","LOW_EPSS_DELTA","2025-12-28T04:06:43.638558+00:00","Daily EPSS score decreased by 0.128 on 2025-08-01","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":147,"version":148},1792329569755,"2.0",{"score":150,"band":151,"action":152,"scoredAt":153},62,"Medium","Plan remediation","2026-10-16T07:08:15.974008+00:00"]