CVE-2025-1877 — MEDIUM (6.5)

Vulnerability Description

A vulnerability, which was classified as critical, was found in D-Link DAP-1562 1.10. This affects the function pure_auth_check of the component HTTP POST Request Handler. The manipulation of the argument a1 leads to null pointer dereference. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Dlink	Dap-1562 Firmware	1.10
Dlink	Dap-1562	All versions

Related Weaknesses (CWE)

CWE-404 CWE-476

References

https://vuldb.com/?ctiid.298191Permissions Required
https://vuldb.com/?id.298191Permissions Required
https://vuldb.com/?submit.506526Third Party Advisory
https://witty-maiasaura-083.notion.site/D-link-DAP-1562-pure_auth_check-VulnerabExploit
https://www.dlink.com/Product

FAQ

What is CVE-2025-1877?

CVE-2025-1877 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A vulnerability, which was classified as critical, was found in D-Link DAP-1562 1.10. This affects the function pure_auth_check of the component HTTP POST Request Handler. The manipulation of the argu...

How severe is CVE-2025-1877?

CVE-2025-1877 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-1877?

Check the references section above for vendor advisories and patch information. Affected products include: Dlink Dap-1562 Firmware, Dlink Dap-1562.