PT-2025-9518 · D Link · D-Link Dap-1562
Witty-Maiasaura-083
·
Publicado
2025-03-03
·
Atualizado
2025-03-04
·
CVE-2025-1876
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
D-Link DAP-1562 version 1.10
Description
A critical issue has been found in the function
http request parse of the component HTTP Header Handler. The manipulation of the argument Authorization leads to a stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This issue only affects products that are no longer supported by the maintainer.Recommendations
As a temporary workaround, consider disabling the
http request parse function until a patch is available. Restrict access to the HTTP Header Handler component to minimize the risk of exploitation. Avoid using the Authorization argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Stack Overflow
Memory Corruption
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
D-Link Dap-1562