CVE-2024-36831: D-Link Dap-1520 Firmware

Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days.

A NULL pointer dereference in the plugins_call_handle_uri_clean function of D-Link DAP-1520 REVA_FIRMWARE_1.10B04_BETA02_HOTFIX allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request without authentication.

Affected products

• D-Link Dap-1520 Firmware: version 1.10b04 only

Published 2024-12-17. Last modified 2026-06-17.