CVE-2025-2620

🗓️ 22 Mar 2025 14:31:05Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 136 Views🌐 WEB

Critical vulnerability in D-Link DAP-1620 allows remote stack-based buffer overflow exploit.

Reporter	Title	Published	Views	Family All 13
GithubExploit	Exploit for Stack-based Buffer Overflow in Dlink Dap-1620_Firmware	22 Mar 202515:26	–	githubexploit
BDU FSTEC	The vulnerability of the mod_graph_auth_uri_handler() function in D-Link’s wireless repeater software DAP-1620 allows a hacker to execute arbitrary code or cause a service failure.	25 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the PDF file processing mechanism of the ClamAV antivirus program allows a hacker to execute arbitrary code.	23 Jun 202500:00	–	bdu_fstec
Circl	CVE-2025-2620	22 Mar 202515:40	–	circl
CNNVD	D-Link DAP-1620 安全漏洞	22 Mar 202500:00	–	cnnvd
CNVD	D-Link DAP-1620 mod_graph_auth_uri_handler function stack buffer overflow vulnerability	27 Mar 202500:00	–	cnvd
Cvelist	CVE-2025-2620 D-Link DAP-1620 Authentication storage mod_graph_auth_uri_handler stack-based overflow	22 Mar 202514:31	–	cvelist
NVD	CVE-2025-2620	22 Mar 202515:15	–	nvd
OSV	CVE-2025-2620	22 Mar 202515:15	–	osv
Positive Technologies	PT-2025-12495 · D Link · D-Link Dap-1620	12 Mar 202500:00	–	ptsecurity

NVD

Vulners

Node

dlink dap-1620_firmwareMatch1.03

AND

dlink dap-1620

[
  {
    "vendor": "D-Link",
    "product": "DAP-1620",
    "versions": [
      {
        "version": "1.03",
        "status": "affected"
      }
    ],
    "modules": [
      "Authentication Handler"
    ]
  }
]

Source	Link
dlink	www.dlink.com/
witty-maiasaura-083	www.witty-maiasaura-083.notion.site/D-link-DAP-1620-mod_graph_auth_uri_handler-Vulnerability-1afb2f2a6361809ea7f2dc4df3b85f1f
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
auth	query param	/storage	Stack-based buffer overflow in mod_graph_auth_uri_handler via oversized input to auth parameter on /storage, enabling DoS and potential RCE.	CWE-119, CWE-787, CWE-121

17 Jun 2026 09:07Current

9.7High risk

Vulners AI Score9.7

CVSS 49.3

CVSS 3.19.8

CVSS 210

CVSS 39.8

EPSS0.07486

SSVC

d-link vulnerability stack-based buffer overflow remote exploit critical security issue unsupported products.