PT-2025-7523 · D Link · D-Link Dap-1320

Hand_King · Published 2025-02-21 · Updated 2025-02-26 · CVE-2025-1539

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DAP-1320 version 1.00

Description A critical issue has been found, affecting the function replace special char of the file /storagein.pd-XXXXXX. This issue leads to a stack-based buffer overflow and can be exploited remotely. The products affected by this issue are no longer supported by the maintainer.

Recommendations For D-Link DAP-1320 version 1.00, as a temporary workaround, consider disabling the replace special char function until a patch is available. However, since the products are no longer supported, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

BDU:2025-01989

CVE-2025-1539

Affected Products

D-Link Dap-1320

References · 15

• 🔥 https://tasty-foxtrot-3a8.notion.site/D-link-DAP-1320-replace_special_char-Vulnerability-1960448e6195809c94f9fd2ff1f59bcf?pvs=4 · Exploit
• https://bdu.fstec.ru/vul/2025-01989 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-1539 · Security Note
• https://osv.dev/vulnerability/CVE-2025-1539 · Vendor Advisory
• https://t.me/latest_high_impact_cve/1862 · Telegram Post
• https://twitter.com/cracbot/status/1894704090569207903 · Twitter Post
• https://vuldb.com/?id.296480 · Note
• https://legacy.us.dlink.com/pages/product.aspx?id=4b2bbe2e3f1d440ea65bc56c7e3dcc5c · Note
• https://twitter.com/CveFindCom/status/1892953376192692541 · Twitter Post
• https://twitter.com/cybercronai/status/1893026753968214356 · Twitter Post
• https://twitter.com/CVEnew/status/1892960243736326376 · Twitter Post
• https://vuldb.com/?submit.497496 · Note
• https://vuldb.com/?ctiid.296480 · Note
• https://dlink.com · Note
• https://t.me/cvedetector/18659 · Telegram Post