D-Link Dap-1620 Firmware vulnerabilities

5 CVEs affecting D-Link Dap-1620 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-2621, published 2025-03-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-46381, published 2022-03-04. High severity, CVSS 7.5. EPSS: 58.9% chance of exploitation in the next 30 days. Local File Inclusion due to path traversal in D-Link DAP-1620 leads to unauthorized internal files reading [/etc/passwd] and [/etc/shadow].
CVE-2025-2620, published 2025-03-22. Critical severity, CVSS 9.8. EPSS: 8.9% chance of exploitation in the next 30 days. A vulnerability has been found in D-Link DAP-1620 1.03 and classified as critical. This vulnerability affects the function mod_graph_auth_uri_handler of the file /storage of the component…
CVE-2025-2621, published 2025-03-22. Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days. A vulnerability was found in D-Link DAP-1620 1.03 and classified as critical. This issue affects the function check_dws_cookie of the file /storage. The manipulation of the argument uid leads to…
CVE-2025-2619, published 2025-03-22. Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, was found in D-Link DAP-1620 1.03. This affects the function check_dws_cookie of the file /storage of the component Cookie Handler. The manipulation…
CVE-2025-2618, published 2025-03-22. Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, has been found in D-Link DAP-1620 1.03. Affected by this issue is the function set_ws_action of the file /dws/api/ of the component Path Handler.…