CVE-2026-4529
Received Received - Intake
Stack-Based Buffer Overflow in D-Link DHP-1320 SOAP Handler

Publication date: 2026-03-21

Last updated on: 2026-04-30

Assigner: VulDB

Description
A vulnerability was identified in D-Link DHP-1320 1.00WWB04. This affects the function redirect_count_down_page of the component SOAP Handler. Such manipulation leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-03-21
Last Modified
2026-04-30
Generated
2026-05-27
AI Q&A
2026-03-22
EPSS Evaluated
2026-05-25
NVD
EUVD
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
dlink dhp-1320_firmware 1.00wwb04
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability exists in the D-Link DHP-1320 device, specifically in the SOAP Handler component's function called redirect_count_down_page. It is a stack-based buffer overflow vulnerability that can be exploited remotely.

An attacker can manipulate the vulnerable function to cause a buffer overflow on the stack, potentially allowing them to execute arbitrary code or cause a denial of service.

The exploit for this vulnerability is publicly available, increasing the risk of attacks.

This vulnerability affects only products that are no longer supported by the manufacturer.


How can this vulnerability impact me? :

Exploitation of this vulnerability can lead to serious impacts including remote code execution, denial of service, or unauthorized control over the affected device.

Since the vulnerability allows remote exploitation without user interaction, attackers can potentially compromise the device remotely.

Because the affected products are no longer supported, there may be no official patches or fixes available, increasing the risk and impact.


How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:

I don't know


How can this vulnerability be detected on my network or system? Can you suggest some commands?

I don't know


What immediate steps should I take to mitigate this vulnerability?

I don't know


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart