On this page

CWE-121: Stack-based Buffer Overflow

Weakness Summary

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

  • Canonical source: MITRE CWE-121 (opens in a new tab)
  • Published Atomicorp CVE observations: 8
  • Distinct affected products in those observations: 5
  • Active Atomicorp rules associated with this weakness: 18

Atomicorp Research Context

Atomicorp has published CVE-specific research observations associated with this weakness category. Each linked CVE page states whether the tested request was detected or blocked and is the authoritative customer-facing finding.

The CVEs and rules shown here are selected published examples, not a complete list of Atomicorp protections. If a CWE, CVE, or rule is absent from this page, no conclusion should be drawn about whether Atomicorp protects against that weakness or attack method.

A CWE describes a class of software weakness. It does not identify one exploit request, and association with a CWE does not mean that every vulnerability or exploitation path in that category is detected or blocked.

Selected Published CVE Observations

CVEVulnerabilityProductAtomicorp findingObserved rules
CVE-2016-6563Dlink DIR Routers Unauthenticated HNAP Login Stack Buffer Overflowdir-823 firmwareProtected by Atomicorp rules381237
CVE-2021-20038SonicWall SMA100 Stack - Buffer Overflow/Remote Code Executionsma 200 firmwareProtected by Atomicorp rules340193
CVE-2022-20705Cisco RV Series Authentication Bypass and Command Injectionrv340 firmwareProtected by Atomicorp rules340006 , 340007 , 340029 , 344360 , 344364 , 344370 , 390709 , 390719
CVE-2026-76070Netis NC63 V3.0.0.3327 Stack Buffer Overflow via Login Password ParameterNC63Protected by Atomicorp rules340014 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-76071Netis NC63 V3.0.0.3327 Stack Buffer Overflow via destHost ParameterNC63Protected by Atomicorp rules340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2025-34108Disk Pulse Enterprise Login Buffer OverflowDisk Pulse EnterpriseProtected by Atomicorp rules344365
CVE-2026-36783Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to Denial of Service Vulnerability-Protected by Atomicorp rules340014 , 340023 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 393655
CVE-2022-20707Cisco RV Series Authentication Bypass and Command Injectionrv340 firmwareProtected by Atomicorp rules340006 , 340007 , 340029 , 344360 , 344364 , 344370 , 390709 , 390719

Associated Atomicorp WAF Rules

RuleStatusBehavior
340006Activedisruptive (deny)
340007Activedisruptive (deny)
340014Activedisruptive (deny)
340023Activedisruptive (deny)
340029Activedisruptive (deny)
340193Activedisruptive (deny)
344360Activedisruptive (deny)
344361Activedisruptive (deny)
344363Activedisruptive (deny)
344364Activedisruptive (deny)
344365Activedisruptive (deny)
344366Activedisruptive (deny)
344370Activedisruptive (deny)
347009Activedisruptive (deny)
381237Activedisruptive (deny)
390709Activedisruptive (deny)
390719Activedisruptive (deny)
393655Activedisruptive (deny)