Critical severity9.8NVD Advisory· Published Jul 13, 2018· Updated Jun 17, 2026

CVE-2016-6563

Description

Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action, Username, LoginPassword, and Captcha. The following products are affected: DIR-823, DIR-822, DIR-818L(W), DIR-895L, DIR-890L, DIR-885L, DIR-880L, DIR-868L, and DIR-850L.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dlink/DIR-823llm-create
Dlink/DIR-822llm-create2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: N/A
Dlink/DIR-818Lllm-create2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: N/A
Dlink/DIR823Gcpe-rescue
Range: N/A
Dlink/DIR-850Lcpe-rescue
Range: N/A
Dlink/DIR-868Lcpe-rescue
Range: N/A
Dlink/DIR-880Lcpe-rescue
Range: N/A
Dlink/DIR-885L/Rcpe-rescue
Range: N/A
Dlink/DIR-890Lcpe-rescue
Range: N/A
Dlink/DIR-895L/Rcpe-rescue
Range: N/A

Patches

Vulnerability mechanics

References

seclists.org/fulldisclosure/2016/Nov/38nvdExploitMailing ListThird Party Advisory
www.exploit-db.com/exploits/40805/nvdExploitThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/94130nvdThird Party AdvisoryVDB Entry
www.kb.cert.org/vuls/id/677427nvdThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.064
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000