CVE-2016-1558: D-Link Dap-2230 Firmware

Critical severity, CVSS 9.8. EPSS: 9.1% chance of exploitation in the next 30 days.

Buffer overflow in D-Link DAP-2310 2.06 and earlier, DAP-2330 1.06 and earlier, DAP-2360 2.06 and earlier, DAP-2553 H/W ver. B1 3.05 and earlier, DAP-2660 1.11 and earlier, DAP-2690 3.15 and earlier, DAP-2695 1.16 and earlier, DAP-3320 1.00 and earlier, and DAP-3662 1.01 and earlier allows remote attackers to have unspecified impact via a crafted 'dlink_uid' cookie.

Affected products

  • D-Link Dap-2230 Firmware: version 1.02 only
  • D-Link Dap-2310 Firmware: version 2.06 only
  • D-Link Dap-2330 Firmware: version 1.06 only
  • D-Link Dap-2360 Firmware: version 2.06 only
  • D-Link Dap-2553 Firmware: version 3.05 only
  • D-Link Dap-2660 Firmware: version 1.11 only
  • D-Link Dap-2690 Firmware: version 3.15 only
  • D-Link Dap-2695 Firmware: version 1.16 only
  • D-Link Dap-3320 Firmware: version 1.00 only
  • D-Link Dap-3662 Firmware: version 1.01 only

Published 2017-04-21. Last modified 2026-06-17.