[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fEknA14raCESdpvrFADh5Ki4nXKIEDuhfJJf94A-qHXM":3,"g5a-risk:CVE-2019-10892":112},{"success":4,"data":5,"meta":110},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":37,"epssPercentile":15,"epssTimeSeries":38,"severity":39,"affectedProducts":40,"affectedProductsCount":50,"references":51,"referencesCount":58,"weaknesses":59,"weaknessesCount":58,"isActivelyExploited":68,"cisaInfo":15,"otxData":15,"relatedBlogPosts":69,"seoMetadata":70,"configurations":95,"relatedVendorCves":108,"notableEvents":109},"CVE-2019-10892","What is CVE-2019-10892?","An issue was discovered in D-Link DIR-806 devices. There is a stack-based buffer overflow in function hnap_main at \u002Fhtdocs\u002Fcgibin. The function will call sprintf without checking the length of strings in parameters given by HTTP header and can be controlled by users. And it finally leads to a stack-based buffer overflow via a special HTTP header.","An issue was discovered in D-Link DIR-806 devices. There is a stack-based buffer overflow in function hnap_main at \u002Fhtdocs\u002Fcgibin. The function will call spr...","2019-09-06T20:15:11.067","2020-08-24T17:37:01.14",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":26,"ExploitabilityScore":36,"ImpactScore":36,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",10,0.02289,[37,37,37,37,37,37,37],"Critical",[41,46],{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"dlink","dir-806_firmware","1.0","cpe:2.3:o:dlink:dir-806_firmware:1.0:*:*:*:*:*:*:*",{"vendor":42,"product":47,"version":48,"criteria":49,"vulnerable":4},"dir-806","-","cpe:2.3:h:dlink:dir-806:-:*:*:*:*:*:*:*",2,[52],{"url":53,"source":54,"tags":55},"https:\u002F\u002Fgithub.com\u002FKirin-say\u002FVulnerabilities\u002Fblob\u002Fmaster\u002FDIR-806_Stack_Overflow_to_Run_Shellcode.md","GitHub",[56,57],"Exploit","Third Party Advisory",1,[60],{"id":61,"name":62,"description":63,"extendedDescription":64,"status":65,"abstraction":66,"structure":67},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",false,[],{"title":71,"metaDescription":72,"keywords":73,"canonicalUrl":74,"structuredData":75},"What is CVE-2019-10892? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-10892, a critical severity cyber security vulnerability from 2019. An issue was discovered in D-Link DIR-806 devices. Ther...","CVE-2019-10892, CVE-2019-10892 vulnerability, CVE-2019-10892 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, dlink security, dir-806_firmware vulnerability, dir-806 vulnerability","\u002Fwhat-is\u002Fcve-2019-10892",{"@context":76,"@type":77,"headline":71,"description":72,"datePublished":10,"dateModified":11,"author":78,"publisher":82,"about":86,"mainEntityOfPage":90,"articleSection":93,"keywords":94},"https:\u002F\u002Fschema.org","TechArticle",{"@type":79,"name":80,"url":81},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":79,"name":80,"url":81,"logo":83},{"@type":84,"url":85},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":87,"name":6,"description":88,"additionalType":89},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":91,"@id":92},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-10892","Cybersecurity","CVE-2019-10892, CVE-2019-10892 vulnerability, CVE-2019-10892 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[96],{"Operator":97,"Negate":15,"Nodes":98},"AND",[99,104],{"Operator":100,"Negate":15,"CPEMatch":101},"OR",[102],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":103,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"0E88755A-2AEB-4B05-885E-866982A899D8",{"Operator":100,"Negate":15,"CPEMatch":105},[106],{"Vulnerable":15,"Criteria":49,"MatchCriteriaID":107,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"80E87253-0A09-40DC-BC77-8DECE8939684",[],[],{"lastModified":11,"cacheTime":111,"version":33},1792378659666,{"score":113,"band":114,"action":115,"scoredAt":116},56,"Medium","Plan remediation","2026-10-16T06:46:49.889091+00:00"]