Vulnerability · Published Mar 3, 2025 · Assigned by VulDB

CVE-2025-1877D-Link DAP-1562 HTTP POST Request pure_auth_check null pointer dereference

Medium 6.5

In plain English

A medium-severity null pointer dereference in DAP-1562 from D-Link. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 65% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)1.1%top 35.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability, which was classified as critical, was found in D-Link DAP-1562 1.10. This affects the function pure_auth_check of the component HTTP POST Request Handler. The manipulation of the argument a1 leads to null pointer dereference. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Affected products (as reported)

Vendor	Product	Versions
D-Link	DAP-1562	1.10

Weakness: CWE-476, CWE-404 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References

VDB-298191 | D-Link DAP-1562 HTTP POST Request pure_auth_check null pointer dereference vdb-entry, technical-description
VDB-298191 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
Submit #506526 | D-Link DAP-1562 1.10 NULL Pointer Dereference third-party-advisory
https://witty-maiasaura-083.notion.site/D-link-DAP-1562-pure_auth_check-Vulnerability-1a5b2f2a63618013a1fecb743f2d0667 exploit
https://www.dlink.com/ product