Vulnerability · Published Mar 22, 2025 · Assigned by VulDB

CVE-2025-2618D-Link DAP-1620 Path api set_ws_action heap-based overflow

Critical 9.8

In plain English

A critical-severity heap buffer overflow in DAP-1620 from D-Link. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 2.1% (higher than 81% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)2.1%top 18.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability, which was classified as critical, has been found in D-Link DAP-1620 1.03. Affected by this issue is the function set_ws_action of the file /dws/api/ of the component Path Handler. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Affected products (as reported)

Vendor	Product	Versions
D-Link	DAP-1620	1.03

Weakness: CWE-122, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

VDB-300620 | D-Link DAP-1620 Path api set_ws_action heap-based overflow vdb-entry, technical-description
VDB-300620 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
Submit #518963 | D-Link DAP-1620 1.03 Buffer Overflow third-party-advisory
https://witty-maiasaura-083.notion.site/D-link-DAP-1620-set_ws_action-Vulnerability-1afb2f2a6361804e86dcde1e78ea2a8e exploit
https://www.dlink.com/ product