CVE-2025-2621: D-Link DAP-1620 storage check_dws_cookie stack-based overflow
A vulnerability was found in D-Link DAP-1620 1.03 and classified as critical. This issue affects the function checkdwscookie of the file /storage. The manipulation of the argument uid leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2621?
CVE-2025-2621 is classified as a critical vulnerability.
What are the effects of exploiting CVE-2025-2621?
Exploiting CVE-2025-2621 can lead to a stack-based buffer overflow, potentially allowing remote code execution.
How do I fix CVE-2025-2621?
To mitigate CVE-2025-2621, it is recommended to update the D-Link DAP-1620 to the latest firmware version.
Who is affected by CVE-2025-2621?
CVE-2025-2621 affects users of the D-Link DAP-1620 operating on firmware version 1.03.
Can CVE-2025-2621 be exploited remotely?
Yes, CVE-2025-2621 can be exploited remotely due to its vulnerability in the function check_dws_cookie.