Buffer overflow in the SSH server functionality on the D-Link DES-3800 with firmware…
Priority MEDIUM 51CWE-119Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.
Summary
Buffer overflow in the SSH server functionality on the D-Link DES-3800 with firmware before 4.50B052, DWL-2100AP with firmware before 2.50RC548, and DWL-3200AP with firmware before 2.55RC549 allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors.
Why it matters now
EPSS 0.05465 92nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 8
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:dlink:des-3800:*:*:*:*:*:*:*:* | all versions | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:o:dlink:des-3800_firmware:*:*:*:*:*:*:*:* | up to 4.50 | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:o:dlink:des-3800_firmware:4.00:*:*:*:*:*:*:* | 4.00 | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dwl-2100ap:*:*:*:*:*:*:*:* | all versions | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:a:dlink:dwl-2100ap_firmware:*:*:*:*:*:*:*:* | up to 2.50 | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dwl-3200ap:*:*:*:*:*:*:*:* | all versions | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:a:dlink:dwl-3200ap_firmware:*:*:*:*:*:*:*:* | up to 2.55 | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:a:dlink:dwl-3200ap_firmware:2.40:*:*:*:*:*:*:* | 2.40 | Vulnerable | D-Link Japan K.K. |
- cpe:2.3:h:dlink:des-3800:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·D-Link Japan K.K.
- cpe:2.3:o:dlink:des-3800_firmware:*:*:*:*:*:*:*:* Versions up to 4.50 Vulnerable ·D-Link Japan K.K.
- cpe:2.3:o:dlink:des-3800_firmware:4.00:*:*:*:*:*:*:* Versions 4.00 Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dwl-2100ap:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·D-Link Japan K.K.
- cpe:2.3:a:dlink:dwl-2100ap_firmware:*:*:*:*:*:*:*:* Versions up to 2.50 Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dwl-3200ap:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·D-Link Japan K.K.
- cpe:2.3:a:dlink:dwl-3200ap_firmware:*:*:*:*:*:*:*:* Versions up to 2.55 Vulnerable ·D-Link Japan K.K.
- cpe:2.3:a:dlink:dwl-3200ap_firmware:2.40:*:*:*:*:*:*:* Versions 2.40 Vulnerable ·D-Link Japan K.K.
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2011-3992
- 2026-10-03 Alias added: GHSA-64pp-ww3p-f3q4
References
More D-Link Japan K.K. Des-3800 vulnerabilities
- TI-2013-05111 Unspecified vulnerability in the Web manager implementation on D-Link Japan DES-3800… CVSS 2.0HIGH 7.8
- TI-2013-05110 Unspecified vulnerability in the SSH implementation on D-Link Japan DES-3800 devices with… CVSS 2.0MEDIUM 6.8
Sources
- CVE-2011-3992 · CVE Program
- CVE-2011-3992 · NVD
- FIRST EPSS
- GHSA-64pp-ww3p-f3q4 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences