D-Link Dir-505l Shareport Mobile Companion vulnerabilities

2 CVEs affecting D-Link Dir-505l Shareport Mobile Companion, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-3936, published 2014-06-02.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-3936, published 2014-06-02. High severity, CVSS 10.0. EPSS: 76.6% chance of exploitation in the next 30 days. Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev. A1) with firmware 1.01b06 and earlier, DIR-505 with firmware before 1.08b10, and DIR-505L with firmware…
• CVE-2013-4772, published 2014-05-12. High severity, CVSS 9.3. EPSS: 4.2% chance of exploitation in the next 30 days. D-Link DIR-505L SharePort Mobile Companion 1.01 and DIR-826L Wireless N600 Cloud Router 1.02 allows remote attackers to bypass authentication via a direct request when an authorized session is active.