What is the CVSS score of CVE-2013-6027?

CVE-2013-6027 has a CVSS 2.0 base score of 8.5 (High). CVSS vector: AV:N/AC:M/Au:S/C:C/I:C/A:C. EPSS exploitation probability: 2.9%.

Is there a public PoC exploit available for CVE-2013-6027?

Yes, a public proof-of-concept exploit is available for CVE-2013-6027. Prioritise patching immediately. EPSS: 2.9%.

Dir 100 CVE-2013-6027

HIGH

Buffer Overflow (CWE-119)

2013-10-19 cret@cert.org

Buffer Overflow D-Link Dir 100

8.5

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

8.5 HIGH

AV:N/AC:M/Au:S/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:S/C:C/I:C/A:C

Attack Vector

Network

Attack Complexity

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Oct 19, 2013 - 10:36 cve.org

HIGH 8.5

DescriptionCVE.org

Stack-based buffer overflow in the RuntimeDiagnosticPing function in /bin/webs on D-Link DIR-100 routers might allow remote authenticated administrators to execute arbitrary commands via a long set/runtime/diagnostic/pingIp parameter to Tools/tools_misc.xgi.

AnalysisAI

Stack-based buffer overflow in the RuntimeDiagnosticPing function in /bin/webs on D-Link DIR-100 routers might allow remote authenticated administrators to execute arbitrary commands via a long. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as Buffer Overflow (CWE-119), which allows attackers to corrupt memory to execute arbitrary code or crash the application. Stack-based buffer overflow in the RuntimeDiagnosticPing function in /bin/webs on D-Link DIR-100 routers might allow remote authenticated administrators to execute arbitrary commands via a long set/runtime/diagnostic/pingIp parameter to Tools/tools_misc.xgi. Affected products include: Dlink Dir-100.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use memory-safe languages or bounds-checking. Enable ASLR, DEP/NX, stack canaries. Use safe string functions.