{"id":"CVE-2025-2621","state":"PUBLISHED","title":"D-Link DAP-1620 storage check_dws_cookie stack-based overflow","description":"A vulnerability was found in D-Link DAP-1620 1.03 and classified as critical. This issue affects the function check_dws_cookie of the file /storage. The manipulation of the argument uid leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.","publishedAt":"2025-03-22T16:31:05.113Z","updatedAt":"2025-03-24T13:03:44.046Z","severity":{"score":9.3,"label":"Critical","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"VulDB"},"assigner":"VulDB","products":["D-Link DAP-1620"],"affected":[{"vendor":"D-Link","product":"DAP-1620","versions":[{"version":"1.03","status":"affected"}]}],"references":["https://vuldb.com/?id.300623","https://vuldb.com/?ctiid.300623","https://vuldb.com/?submit.518980","https://witty-maiasaura-083.notion.site/D-link-DAP-1620-check_dws_uid-Vulnerability-1b4b2f2a63618025b049f6e62a1835c0","https://www.dlink.com/"],"weaknesses":["CWE-121","CWE-119"],"ingestedAt":"2026-10-29T20:08:55.257Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/2xxx/CVE-2025-2621.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-2621","state":"PUBLISHED","datePublished":"2025-03-22T16:31:05.113Z","dateUpdated":"2025-03-24T13:03:44.046Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2025-03-21T20:28:55.449Z"},"containers":{"cna":{"title":"D-Link DAP-1620 storage check_dws_cookie stack-based overflow","descriptions":[{"lang":"en","value":"A vulnerability was found in D-Link DAP-1620 1.03 and classified as critical. This issue affects the function check_dws_cookie of the file /storage. The manipulation of the argument uid leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer."},{"lang":"de","value":"Eine kritische Schwachstelle wurde in D-Link DAP-1620 1.03 gefunden. Betroffen davon ist die Funktion check_dws_cookie der Datei /storage. Durch Manipulation des Arguments uid mit unbekannten Daten kann eine stack-based buffer overflow-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung."}],"affected":[{"vendor":"D-Link","product":"DAP-1620","versions":[{"version":"1.03","status":"affected"}]}],"references":[{"url":"https://vuldb.com/?id.300623","name":"VDB-300623 | D-Link DAP-1620 storage check_dws_cookie stack-based overflow","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/?ctiid.300623","name":"VDB-300623 | CTI Indicators (IOB, IOC, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/?submit.518980","name":"Submit #518980 | D-Link DAP-1620 1.03 Buffer Overflow","tags":["third-party-advisory"]},{"url":"https://witty-maiasaura-083.notion.site/D-link-DAP-1620-check_dws_uid-Vulnerability-1b4b2f2a63618025b049f6e62a1835c0","tags":["exploit"]},{"url":"https://www.dlink.com/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":9.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","baseSeverity":"CRITICAL"}},{"cvssV3_1":{"version":"3.1","baseScore":9.8,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseSeverity":"CRITICAL"}},{"cvssV3_0":{"version":"3.0","baseScore":9.8,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseSeverity":"CRITICAL"}},{"cvssV2_0":{"version":"2.0","baseScore":10,"vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-121","type":"CWE","lang":"en","description":"Stack-based Buffer Overflow"}]},{"descriptions":[{"cweId":"CWE-119","type":"CWE","lang":"en","description":"Memory Corruption"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2025-03-22T16:31:05.113Z"},"timeline":[{"time":"2025-03-21T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2025-03-21T01:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2025-03-21T21:34:00.000Z","lang":"en","value":"VulDB entry last update"}],"tags":["unsupported-when-assigned"]},"adp":[{"title":"CISA ADP Vulnrichment","references":[{"url":"https://witty-maiasaura-083.notion.site/D-link-DAP-1620-check_dws_uid-Vulnerability-1b4b2f2a63618025b049f6e62a1835c0","tags":["exploit"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-03-24T13:03:40.002184Z","id":"CVE-2025-2621","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-03-24T13:03:44.046Z"}}]}}}