CVE-2025-1539

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-1539
A vulnerability, which was classified as critical, has been found in D-Link DAP-1320 1.00. Affected by this issue is the function replace_special_char of the file /storagein.pd-XXXXXX. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

9.0 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability : 8.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
https://legacy.us.dlink.com/pages/product.aspx?id=4b2bbe2e3f1d440ea65bc56c7e3dcc5c Product
https://tasty-foxtrot-3a8.notion.site/D-link-DAP-1320-replace_special_char-Vulnerability-1960448e6195809c94f9fd2ff1f59bcf?pvs=4 Third Party Advisory
https://vuldb.com/?ctiid.296480 Permissions Required
https://vuldb.com/?id.296480 Permissions Required
https://vuldb.com/?submit.497496 Third Party Advisory
https://www.dlink.com/ Product
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dlink:dap-1320_firmware:1.0:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dap-1320:-:*:*:*:*:*:*:*
History

17 Jun 2026, 08:39

Type Values Removed Values Added
Summary
  • (es) Se ha encontrado una vulnerabilidad clasificada como crítica en D-Link DAP-1320 1.00. Este problema afecta a la función replace_special_char del archivo /storagein.pd-XXXXXX. La manipulación provoca un desbordamiento del búfer basado en la pila. El ataque puede ejecutarse de forma remota. El exploit se ha hecho público y puede utilizarse. Esta vulnerabilidad solo afecta a los productos que ya no reciben soporte del fabricante.
CPE cpe:2.3:o:dlink:dap-1320_firmware:1.0:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dap-1320:-:*:*:*:*:*:*:*
First Time Dlink dap-1320 Firmware
Dlink
Dlink dap-1320
CWE CWE-787
References () https://legacy.us.dlink.com/pages/product.aspx?id=4b2bbe2e3f1d440ea65bc56c7e3dcc5c - () https://legacy.us.dlink.com/pages/product.aspx?id=4b2bbe2e3f1d440ea65bc56c7e3dcc5c - Product
References () https://tasty-foxtrot-3a8.notion.site/D-link-DAP-1320-replace_special_char-Vulnerability-1960448e6195809c94f9fd2ff1f59bcf?pvs=4 - () https://tasty-foxtrot-3a8.notion.site/D-link-DAP-1320-replace_special_char-Vulnerability-1960448e6195809c94f9fd2ff1f59bcf?pvs=4 - Third Party Advisory
References () https://vuldb.com/?ctiid.296480 - () https://vuldb.com/?ctiid.296480 - Permissions Required
References () https://vuldb.com/?id.296480 - () https://vuldb.com/?id.296480 - Permissions Required
References () https://vuldb.com/?submit.497496 - () https://vuldb.com/?submit.497496 - Third Party Advisory
References () https://www.dlink.com/ - () https://www.dlink.com/ - Product

21 Feb 2025, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-21 15:15

Updated : 2026-06-17 08:39

NVD link : CVE-2025-1539

Mitre link : CVE-2025-1539

CVE.ORG link : CVE-2025-1539

JSON object : View

Products Affected

dlink

  • dap-1320_firmware
  • dap-1320
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-121

Stack-based Buffer Overflow

CWE-787

Out-of-bounds Write