CVE-2025-10779 | D-Link DCS-935L up to 1.13.01 /HNAP1/ sub_402280 HNAP_AUTH/SOAPAction stack-based overflow

September 21, 2025 Yanac

A vulnerability described as critical has been identified in D-Link DCS-935L up to 1.13.01. The impacted element is the function sub_402280 of the file /HNAP1/. The manipulation of the argument HNAP_AUTH/SOAPAction results in stack-based buffer overflow. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is cataloged as CVE-2025-10779. The attack may be launched remotely. Furthermore, there is an exploit available.VulDB Recent EntriesRead More