CVE-2025-2621: D-Link DAP-1620 storage check_dws_cookie stack-based overflow
First published: Sat Mar 22 2025(Updated: )
A vulnerability was found in D-Link DAP-1620 1.03 and classified as critical. This issue affects the function check_dws_cookie of the file /storage. The manipulation of the argument uid leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| D-Link DAP-1620 | ||
| All of | ||
| Dlink DAP-1620 Firmware | =1.03 | |
| Dlink Dap-1620 Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-2621?
CVE-2025-2621 is classified as a critical vulnerability.
What are the effects of exploiting CVE-2025-2621?
Exploiting CVE-2025-2621 can lead to a stack-based buffer overflow, potentially allowing remote code execution.
How do I fix CVE-2025-2621?
To mitigate CVE-2025-2621, it is recommended to update the D-Link DAP-1620 to the latest firmware version.
Who is affected by CVE-2025-2621?
CVE-2025-2621 affects users of the D-Link DAP-1620 operating on firmware version 1.03.
Can CVE-2025-2621 be exploited remotely?
Yes, CVE-2025-2621 can be exploited remotely due to its vulnerability in the function check_dws_cookie.
- agent/references
- agent/title
- agent/type
- agent/first-publish-date
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- agent/severity
- agent/author
- agent/source
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- collector/nvd-api
- source/NVD
- vendor/d-link
- canonical/d-link dap-1620
- vendor/dlink
- canonical/dlink dap-1620 firmware
- version/dlink dap-1620 firmware/1.03