Vulnerability Description
A vulnerability classified as critical was found in D-Link DAP-1320 1.00. Affected by this vulnerability is the function set_ws_action of the file /dws/api/. The manipulation leads to heap-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dlink | Dap-1320 Firmware | 1.0 |
| Dlink | Dap-1320 | - |
Related Weaknesses (CWE)
References
- https://legacy.us.dlink.com/pages/product.aspx?id=4b2bbe2e3f1d440ea65bc56c7e3dccProduct
- https://tasty-foxtrot-3a8.notion.site/D-link-DAP-1320-set_ws_action-VulnerabilitExploitThird Party Advisory
- https://tasty-foxtrot-3a8.notion.site/D-link-DAP-1320-set_ws_action-VulnerabilitExploit
- https://vuldb.com/?ctiid.296479Permissions Required
- https://vuldb.com/?id.296479Permissions Required
- https://vuldb.com/?submit.497301Third Party Advisory
- https://www.dlink.com/Product
FAQ
What is CVE-2025-1538?
CVE-2025-1538 is a vulnerability with a CVSS score of 8.8 (HIGH). A vulnerability classified as critical was found in D-Link DAP-1320 1.00. Affected by this vulnerability is the function set_ws_action of the file /dws/api/. The manipulation leads to heap-based buffe...
How severe is CVE-2025-1538?
CVE-2025-1538 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-1538?
Check the references section above for vendor advisories and patch information. Affected products include: Dlink Dap-1320 Firmware, Dlink Dap-1320.