CVE-2025-12295: D-Link DAP-2695 Firmware Update sub_40C6B8 signature verification

Published Oct 27, 2025

Updated

A weakness has been identified in D-Link DAP-2695 2.00RC13. The affected element is the function sub40C6B8 of the component Firmware Update Handler. Executing manipulation can lead to improper verification of cryptographic signature. The attack can be launched remotely. Attacks of this nature are highly complex. The exploitability is described as difficult. The exploit has been made available to the public and could be exploited. This vulnerability only affects products that are no longer supported by the maintainer.

Affected Software

3 affected components

D-Link DAP-2695

All of the following

Dlink Dap-2695 Firmware=2.00-rc131

Dlink DAP-2695

Event History

Oct 27, 2025

CVE Published

via MITRE·04:32 PM

Data Sourced

via MITRE·04:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-12295?

CVE-2025-12295 has been categorized as a high-severity vulnerability due to remote exploitation potential.

How do I fix CVE-2025-12295?

To mitigate CVE-2025-12295, update the D-Link DAP-2695 firmware to the latest version provided by D-Link.

What types of attacks are possible with CVE-2025-12295?

CVE-2025-12295 allows for remote attacks that exploit improper verification of cryptographic signatures.

Which device is affected by CVE-2025-12295?

The affected device for CVE-2025-12295 is the D-Link DAP-2695 running firmware version 2.00RC13.

Is CVE-2025-12295 exploitable without authentication?

Yes, CVE-2025-12295 can be exploited remotely without the need for authentication.