Critical severity9.8NVD Advisory· Published Feb 13, 2020· Updated Jun 17, 2026

CVE-2020-8962

Description

A stack-based buffer overflow was found on the D-Link DIR-842 REVC with firmware v3.13B09 HOTFIX due to the use of strcpy for LOGINPASSWORD when handling a POST request to the /MTFWU endpoint.

Affected products

Dlink/Dir 842 Firmware
cpe:2.3:o:dlink:dir-842_firmware:3.13b09:*:*:*:*:*:*:*
D-Link/DIR-842 REVCdescription
Dlink/DIR-842llm-create
Range: v3.13B09 HOTFIX

Patches

Vulnerability mechanics

References

ctrsec.io/index.php/2020/02/12/cve-2020-8962-d-link-dir-842-stack-based-buffer-overflow/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000