CVE-2025-1539: D-Link DAP-1320 storagein.pd-XXXXXX replace_special_char stack-based overflow
First published: Fri Feb 21 2025(Updated: )
A vulnerability, which was classified as critical, has been found in D-Link DAP-1320 1.00. Affected by this issue is the function replace_special_char of the file /storagein.pd-XXXXXX. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| D-Link DAP-1320 | ||
| All of | ||
| =1.0 | ||
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://vuldb.com/?id.296480
- https://vuldb.com/?ctiid.296480
- https://vuldb.com/?submit.497496
- https://tasty-foxtrot-3a8.notion.site/D-link-DAP-1320-replace_special_char-Vulnerability-1960448e6195809c94f9fd2ff1f59bcf?pvs=4
- https://legacy.us.dlink.com/pages/product.aspx?id=4b2bbe2e3f1d440ea65bc56c7e3dcc5c
- https://www.dlink.com/
Frequently Asked Questions
What is the severity of CVE-2025-1539?
CVE-2025-1539 is classified as a critical vulnerability.
What type of vulnerability is CVE-2025-1539?
CVE-2025-1539 is a stack-based buffer overflow vulnerability.
Who is affected by CVE-2025-1539?
The D-Link DAP-1320 firmware version 1.00 is affected by CVE-2025-1539.
How can CVE-2025-1539 be exploited?
CVE-2025-1539 can be exploited remotely by manipulating the replace_special_char function.
How do I fix CVE-2025-1539?
To fix CVE-2025-1539, update the D-Link DAP-1320 to the latest firmware provided by the manufacturer.
- agent/title
- agent/references
- agent/author
- agent/source
- agent/type
- agent/first-publish-date
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/event
- collector/nvd-api
- source/NVD
- vendor/d-link
- canonical/d-link dap-1320
- vendor/dlink