CVE-2023-39749

CriticalCVSS 9.8

Published: 21/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.00%

58th percentile - higher than 58% of all known CVEs

Summary

Version 1.13 of the D-Link DAP-2660 contains a buffer overflow vulnerability in the /adv_resource component. This vulnerability can be exploited via a crafted GET request.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the system or execution of malicious code, posing a serious security threat to the organization.

Recommendation

It is recommended to update the device to the latest firmware version to mitigate this vulnerability and to monitor network traffic for potential attack attempts.

Original NVD description (English source)

D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the component /adv_resource. This vulnerability is exploited via a crafted GET request.