CVE-2016-1558: Buffer Overflow

Published Apr 21, 2017
·
Updated

Buffer overflow in D-Link DAP-2310 2.06 and earlier, DAP-2330 1.06 and earlier, DAP-2360 2.06 and earlier, DAP-2553 H/W ver. B1 3.05 and earlier, DAP-2660 1.11 and earlier, DAP-2690 3.15 and earlier, DAP-2695 1.16 and earlier, DAP-3320 1.00 and earlier, and DAP-3662 1.01 and earlier allows remote attackers to have unspecified impact via a crafted 'dlinkuid' cookie.

Affected Software

20 affected components
Dlink Dap-3662 Firmware=1.01
Dlink DAP-3662
Dlink Dap-2310 Firmware=2.06
Dlink DAP-2310
Dlink Dap-2330 Firmware=1.06
Dlink DAP-2330
Dlink Dap-2360 Firmware=2.06
Dlink DAP-2360
Dlink Dap-2553 Firmware=3.05
Dlink DAP-2553
Dlink Dap-2660 Firmware=1.11
Dlink DAP-2660
Dlink Dap-2690 Firmware=3.15
Dlink DAP-2690
Dlink Dap-2695 Firmware=1.16
Dlink DAP-2695
Dlink Dap-3320 Firmware=1.00
Dlink DAP-3320
Dlink Dap-2230 Firmware=1.02
Dlink Dap-2230

Event History

Apr 21, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2016-1558?

CVE-2016-1558 has a high severity level due to the potential for remote code execution via buffer overflow.

2

How do I fix CVE-2016-1558?

To mitigate CVE-2016-1558, update the firmware of your D-Link DAP devices to the latest version available from the manufacturer.

3

Which D-Link devices are affected by CVE-2016-1558?

CVE-2016-1558 affects multiple D-Link devices including the DAP-2310, DAP-2330, DAP-2360, DAP-2553, DAP-2660, DAP-2690, DAP-2695, DAP-3320, and DAP-3662 with specified firmware versions.

4

What type of vulnerability is CVE-2016-1558?

CVE-2016-1558 is a buffer overflow vulnerability that can be exploited remotely.

5

Is CVE-2016-1558 exploitable without authentication?

Yes, CVE-2016-1558 can be exploited by an attacker without requiring authentication, which increases its risk.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203