CVE-2025-1877
D-Link DAP-1562 HTTP POST Request pure_auth_check null pointer dereference
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
A vulnerability, which was classified as critical, was found in D-Link DAP-1562 1.10. This affects the function pure_auth_check of the component HTTP POST Request Handler. The manipulation of the argument a1 leads to null pointer dereference. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Es wurde eine kritische Schwachstelle in D-Link DAP-1562 1.10 gefunden. Hiervon betroffen ist die Funktion pure_auth_check der Komponente HTTP POST Request Handler. Durch die Manipulation des Arguments a1 mit unbekannten Daten kann eine null pointer dereference-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk angegangen werden. Der Exploit steht zur öffentlichen Verfügung.
CVSS Scores
SSVC
- Decision:Track*
Timeline
- 2025-03-03 CVE Reserved
- 2025-03-03 CVE Published
- 2025-03-03 CVE Updated
- 2025-03-03 First Exploit
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-404: Improper Resource Shutdown or Release
- CWE-476: NULL Pointer Dereference
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| https://vuldb.com/?id.298191 | Technical Description | |
| https://vuldb.com/?submit.506526 | Third Party Advisory | |
| https://www.dlink.com | Product |
| URL | Date | SRC |
|---|---|---|
| https://witty-maiasaura-083.notion.site/D-link-DAP-1562-pure_auth_check-Vulnerability-1a5b2f2a63618013a1fecb743f2d0667 | 2025-03-03 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|