CVE-2025-2621

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Mar 22, 2025
Updated: Mar 26, 2025
CWE ID 119
CWE ID 787
CWE ID 121

Summary

CVE-2025-2621 is a critical vulnerability affecting the D-Link DAP-1620 1.03. The issue lies in the check_dws_cookie function of the /storage file, which is susceptible to a stack-based buffer overflow. An attacker can exploit this vulnerability by manipulating the uid argument, resulting in arbitrary code execution. The exploit for this vulnerability has been made public, increasing the risk for potential attacks. However, it is important to note that this vulnerability only impacts unsupported D-Link DAP-1620 devices.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share