CVE-2025-1539highCWE-119CWE-121

CVE-2025-1539: high-severity vulnerability in D-Link DAP-1320

D-Link DAP-1320 storagein.pd-XXXXXX replace_special_char stack-based overflow

Published

Follow this CVE+ Monitor DAP-1320

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.7epss 1.6%
A vulnerability, which was classified as critical, has been found in D-Link DAP-1320 1.00. Affected by this issue is the function replace_special_char of the file /storagein.pd-XXXXXX. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
D-Link · DAP-1320
Related CVEs — D-Link DAP-1320

In the same product, most dangerous first.

CVE-2025-1538HIGHD-Link DAP-1320 api set_ws_action heap-based overflowEPSS 1.5%