CVE-2016-1558

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 9.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-04-21 · updated 2026-06-17
Weakness: CWE-119

Description

Buffer overflow in D-Link DAP-2310 2.06 and earlier, DAP-2330 1.06 and earlier, DAP-2360 2.06 and earlier, DAP-2553 H/W ver. B1 3.05 and earlier, DAP-2660 1.11 and earlier, DAP-2690 3.15 and earlier, DAP-2695 1.16 and earlier, DAP-3320 1.00 and earlier, and DAP-3662 1.01 and earlier allows remote attackers to have unspecified impact via a crafted 'dlink_uid' cookie.

Affected products

Dlink Dap-2230 Firmware: 1.02
Dlink Dap-2310 Firmware: 2.06
Dlink Dap-2330 Firmware: 1.06
Dlink Dap-2360 Firmware: 2.06
Dlink Dap-2553 Firmware: 3.05
Dlink Dap-2660 Firmware: 1.11
Dlink Dap-2690 Firmware: 3.15
D-Link DAP-2695: 1.16
Dlink Dap-3320 Firmware: 1.00
Dlink Dap-3662 Firmware: 1.01

References

http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html
http://seclists.org/fulldisclosure/2016/Feb/112
http://www.dlink.com/mk/mk/support/support-news/2016/march/16/firmadyne-cve_2016_1558-cve_2016_1559
http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html
http://seclists.org/fulldisclosure/2016/Feb/112
http://www.dlink.com/mk/mk/support/support-news/2016/march/16/firmadyne-cve_2016_1558-cve_2016_1559

Get alerted when CVE-2016-1558 or the next vulnerability affects your stack