CVE-2025-2620CWE-119CWE-121

D-Link DAP-1620 Authentication storage mod_graph_auth_uri_handler stack-based overflow

Critical · published March 22, 2025

CVSS v4.0
9.3
EPSS
9%
Percentile
95.2
In the wild
Unconfirmed
What it is

🔥 A stack-based buffer overflow vulnerability in the D-Link DAP-1620 could let attackers remotely hijack your device — and this one’s a doozy since it affects unsupported products! Think of this like a malfunctioning elevator that can be called remotely; if someone knows how to exploit it, they can take control and send it crashing into the basement, causing complete chaos! An attacker could exploit this vulnerability to execute arbitrary code, potentially leading to unauthorized access to sensitive data or the complete takeover of your device. Since this affects unsupported products, it's a ticking time bomb waiting to go off!

Put simply

Think of this like a malfunctioning elevator that can be called remotely; if someone knows how to exploit it, they can take control and send it crashing into the basement, causing complete chaos! This vulnerability arises in the mod_graph_auth_uri_handler function of the Authentication Handler, allowing remote manipulation that leads to a stack-based buffer overflow. This means that an attacker can disrupt the normal operation of the device and potentially control it from afar.

What to do

An attacker could exploit this vulnerability to execute arbitrary code, potentially leading to unauthorized access to sensitive data or the complete takeover of your device. Since this affects unsupported products, it's a ticking time bomb waiting to go off! To mitigate this threat, immediately disconnect any affected D-Link DAP-1620 devices from the network. If possible, replace them with supported alternatives. Regularly review and update your devices, ensuring you're using supported hardware. Don’t let outdated technology be the gateway for attackers! You've got this! By taking these steps, you’ll not only safeguard your network but earn your Security Hero badge! 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.08850 · 95.2th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-121 · Stack-based Buffer Overflow
Published
2025-03-22T14:31Z
EPSS history
Timeline
  • 22 MAR 14:31Z
    D-Link DAP-1620 Authentication storage mod_graph_auth_uri_handler stack-based overflow
    cvelistv5