CVE-2001-1137 describes a denial-of-service vulnerability in D-Link DI-704 Internet Gateway firmware versions earlier than V2.56b6, allowing remote attackers to trigger a device reboot using malformed IP datagram fragments. This medium-severity vulnerability (CVSS 5.0) requires no authentication and has a low attack complexity, leading to a partial availability impact. While not listed on CISA's KEV catalog, an exploit is publicly available on ExploitDB, and the CVE has garnered significant community discussion, indicating awareness among security researchers.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
v2.56b5CPE matchmatch criteria | cpe:2.3:h:d-link:dl-704:v2.56b5:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.