Exploitation Summary
EIP tracks 1 public exploit for CVE-2025-2620. PoCs published by Otsmane-Ahmed.
AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2025-2620, a stack-based buffer overflow vulnerability in the D-Link DAP-1620 router. The exploit demonstrates both buffer overflow testing and remote code execution capabilities.
Description
A vulnerability has been found in D-Link DAP-1620 1.03 and classified as critical. This vulnerability affects the function mod_graph_auth_uri_handler of the file /storage of the component Authentication Handler. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Exploits (1)
This repository contains a proof-of-concept exploit for CVE-2025-2620, a stack-based buffer overflow vulnerability in the D-Link DAP-1620 router. The exploit demonstrates both buffer overflow testing and remote code execution capabilities.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H