Stack-Based Buffer Overflow in D-Link DAP-1620 Cookie Handler
CVE-2025-2619
9.3CRITICAL
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2025-2619?
A stack-based buffer overflow was identified in the D-Link DAP-1620 1.03, specifically within the check_dws_cookie function of the Cookie Handler component. This vulnerability is exploitable remotely, allowing unauthorized access and manipulation. It predominantly affects D-Link products that are no longer receiving maintenance support, raising significant security concerns, especially since the exploit has been publicly disclosed.
Affected Version(s)
DAP-1620 1.03
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.