Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-1876

Опубликовано: 03 мар. 2025
Источник: nvd
CVSS3: 7.3
CVSS3: 9.8
CVSS2: 7.5
EPSS Низкий

Описание

A vulnerability, which was classified as critical, has been found in D-Link DAP-1562 1.10. Affected by this issue is the function http_request_parse of the component HTTP Header Handler. The manipulation of the argument Authorization leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:dlink:dap-1562_firmware:1.10:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dap-1562:-:*:*:*:*:*:*:*

EPSS

Процентиль: 47%
0.00245
Низкий

7.3 High

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-119
CWE-787

Связанные уязвимости

CVSS3: 7.3
github
11 месяцев назад

A vulnerability, which was classified as critical, has been found in D-Link DAP-1562 1.10. Affected by this issue is the function http_request_parse of the component HTTP Header Handler. The manipulation of the argument Authorization leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

CVSS3: 7.3
fstec
11 месяцев назад

Уязвимость компонента HTTP Header Handler функции http_request_parse микропрограммного обеспечения беспроводной точки доступа D-Link DAP-1562, позволяющая нарушителю оказать влияние на конфиденциальность, доступность и целостность защищаемой информации

EPSS

Процентиль: 47%
0.00245
Низкий

7.3 High

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-119
CWE-787