CVE-2006-6538 - Vulnerability Details - OpenCVE

D-LINK DWL-2000AP+ firmware 2.11 allows remote attackers to cause (1) a denial of service (device reset) via a flood of ARP replies on the wired or wireless (radio) link and (2) a denial of service (device crash) via a flood of ARP requests on the wireless link.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Complete

This CVE is not in the KEV list.

The EPSS score is 0.08766.

Key SSVC decision points have not yet been added.

Vendors	Products
D-link	Dwl-2000ap\+

Configuration 1 [-]

cpe:2.3:h:d-link:dwl-2000ap\+:2.11:*:*:*:*:*:*:*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2006-6521	D-LINK DWL-2000AP+ firmware 2.11 allows remote attackers to cause (1) a denial of service (device reset) via a flood of ARP replies on the wired or wireless (radio) link and (2) a denial of service (device crash) via a flood of ARP requests on the wireless link.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://secunia.com/advisories/23332
http://securityreason.com/securityalert/2029
http://tripp.dynalias.org/arpflood.c
http://www.securityfocus.com/archive/1/454047/100/0/threaded
http://www.vupen.com/english/advisories/2006/4965
https://exchange.xforce.ibmcloud.com/vulnerabilities/30837
https://www.exploit-db.com/exploits/2915

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2006-12-14T02:00:00

Updated: 2024-08-07T20:26:46.616Z

Reserved: 2006-12-13T00:00:00

Link: CVE-2006-6538

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2006-12-14T02:28:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2006-6538

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-12-11T00:00:00", "descriptions": [{"lang": "en", "value": "D-LINK DWL-2000AP+ firmware 2.11 allows remote attackers to cause (1) a denial of service (device reset) via a flood of ARP replies on the wired or wireless (radio) link and (2) a denial of service (device crash) via a flood of ARP requests on the wireless link."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-17T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://tripp.dynalias.org/arpflood.c"}, {"name": "dlink-arp-dos(30837)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30837"}, {"name": "20061211 D-LINK DWL-2000AP+ remote DoS", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/454047/100/0/threaded"}, {"name": "23332", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/23332"}, {"name": "2029", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/2029"}, {"name": "2915", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "https://www.exploit-db.com/exploits/2915"}, {"name": "ADV-2006-4965", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/4965"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-6538", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "D-LINK DWL-2000AP+ firmware 2.11 allows remote attackers to cause (1) a denial of service (device reset) via a flood of ARP replies on the wired or wireless (radio) link and (2) a denial of service (device crash) via a flood of ARP requests on the wireless link."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://tripp.dynalias.org/arpflood.c", "refsource": "MISC", "url": "http://tripp.dynalias.org/arpflood.c"}, {"name": "dlink-arp-dos(30837)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30837"}, {"name": "20061211 D-LINK DWL-2000AP+ remote DoS", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/454047/100/0/threaded"}, {"name": "23332", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/23332"}, {"name": "2029", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/2029"}, {"name": "2915", "refsource": "EXPLOIT-DB", "url": "https://www.exploit-db.com/exploits/2915"}, {"name": "ADV-2006-4965", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/4965"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T20:26:46.616Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://tripp.dynalias.org/arpflood.c"}, {"name": "dlink-arp-dos(30837)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30837"}, {"name": "20061211 D-LINK DWL-2000AP+ remote DoS", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/454047/100/0/threaded"}, {"name": "23332", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/23332"}, {"name": "2029", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/2029"}, {"name": "2915", "tags": ["exploit", "x_refsource_EXPLOIT-DB", "x_transferred"], "url": "https://www.exploit-db.com/exploits/2915"}, {"name": "ADV-2006-4965", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/4965"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-6538", "datePublished": "2006-12-14T02:00:00", "dateReserved": "2006-12-13T00:00:00", "dateUpdated": "2024-08-07T20:26:46.616Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:d-link:dwl-2000ap\\+:2.11:*:*:*:*:*:*:*", "matchCriteriaId": "7FD3895B-8402-49C2-A3E7-47F0958D5A58", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "D-LINK DWL-2000AP+ firmware 2.11 allows remote attackers to cause (1) a denial of service (device reset) via a flood of ARP replies on the wired or wireless (radio) link and (2) a denial of service (device crash) via a flood of ARP requests on the wireless link."}, {"lang": "es", "value": "D-LINK DWL-2000AP+ firmware 2.11 permite a un atacante remoto provocar (1) denegaci\u00f3n de servicio (reinicio de dispositivo) a trav\u00e9s de una avalancha de respuestas ARP sobre el enlace del cable o wireless (radio) y un (2) denegaci\u00f3n de servicio (dispositivo caido) a trav\u00e9s de avalancha de respuestas ARP sobre el enlace wireless."}], "id": "CVE-2006-6538", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.8, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-12-14T02:28:00.000", "references": [{"source": "cve@mitre.org", "url": "http://secunia.com/advisories/23332"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/2029"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://tripp.dynalias.org/arpflood.c"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/454047/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2006/4965"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30837"}, {"source": "cve@mitre.org", "url": "https://www.exploit-db.com/exploits/2915"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/23332"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/2029"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://tripp.dynalias.org/arpflood.c"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/454047/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2006/4965"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30837"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.exploit-db.com/exploits/2915"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}