PT-2025-12495 · D Link · D-Link Dap-1620

Published

2025-03-12

·

Updated

2025-12-02

·

CVE-2025-2620

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions D-Link DAP-1620 version 1.03
Description A critical vulnerability has been found in the D-Link DAP-1620, affecting the mod graph auth uri handler function of the Authentication Handler component. This vulnerability leads to a stack-based buffer overflow and can be exploited remotely. The exploit has been disclosed to the public and may be used. This issue only affects products that are no longer supported by the maintainer.
Recommendations As a temporary workaround, consider disabling the mod graph auth uri handler function until a patch is available. However, since the products are no longer supported by the maintainer, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Heap Based Buffer Overflow

Stack Overflow

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-787CWE-122CWE-121CWE-119

Related Identifiers

ALT-PU-2025-13775
ALT-PU-2025-13835
ALT-PU-2025-14045
ALT-PU-2025-15220
BDU:2025-03189
BDU:2025-07430
CVE-2025-2620

Affected Products

D-Link Dap-1620