D-Link DAP-1562 Null Pointer Dereference Vulnerability

Vulnerability

A critical null pointer dereference vulnerability has been identified in the D-Link DAP-1562 access point, specifically in version 1.10. This issue arises in the HTTP POST request handler, within the 'pure_auth_check' function, where the 'a1' argument can be manipulated to cause a null pointer dereference. The vulnerability can be exploited remotely, leading to a denial-of-service condition by causing the device to crash or become unresponsive.

Impact

Exploitation of this vulnerability causes a null pointer dereference, which typically results in a crash or an unexpected termination of the application, disrupting normal functionality.

Remediation

It is recommended to use a firewall to block or restrict access to the vulnerable device.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
2.6
impact
2.5
exploitability
6.2
remediation
7.9
relevance
0.0
threat
6.4
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.