D-Link Dap-2695 Firmware vulnerabilities

11 CVEs affecting D-Link Dap-2695 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-12296, published 2025-10-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-1558, published 2017-04-21. Critical severity, CVSS 9.8. EPSS: 9.1% chance of exploitation in the next 30 days. Buffer overflow in D-Link DAP-2310 2.06 and earlier, DAP-2330 1.06 and earlier, DAP-2360 2.06 and earlier, DAP-2553 H/W ver. B1 3.05 and earlier, DAP-2660 1.11 and earlier, DAP-2690 3.15 and earlier,…
CVE-2025-12296, published 2025-10-27. Critical severity, CVSS 9.8. EPSS: 7% chance of exploitation in the next 30 days. A security vulnerability has been detected in D-Link DAP-2695 2.00RC13. The impacted element is the function sub_4174B0 of the component Firmware Update Handler. The manipulation leads to os command…
CVE-2025-11665, published 2025-10-13. Critical severity, CVSS 9.8. EPSS: 6.8% chance of exploitation in the next 30 days. A vulnerability was detected in D-Link DAP-2695 2.00RC131. This affects the function fwupdater_main of the file rgbin of the component Firmware Update Handler. Performing manipulation results in os…
CVE-2021-28840, published 2021-08-10. High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days. Null Pointer Dereference vulnerability exists in D-Link DAP-2310 2.07.RC031, DAP-2330 1.07.RC028, DAP-2360 2.07.RC043, DAP-2553 3.06.RC027, DAP-2660 1.13.RC074, DAP-2690 3.16.RC100, DAP-2695…
CVE-2021-28838, published 2021-08-10. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. Null pointer dereference vulnerability in D-Link DAP-2310 2,10RC039, DAP-2330 1.10RC036 BETA, DAP-2360 2.10RC055, DAP-2553 3.10rc039 BETA, DAP-2660 1.15rc131b, DAP-2690 3.20RC115 BETA, DAP-2695…
CVE-2021-28839, published 2021-08-10. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Null Pointer Dereference vulnerability exists in D-Link DAP-2310 2.07.RC031, DAP-2330 1.07.RC028, DAP-2360 2.07.RC043, DAP-2553 3.06.RC027, DAP-2660 1.13.RC074, DAP-2690 3.16.RC100, DAP-2695…
CVE-2025-4859, published 2025-05-18. Medium severity, CVSS 4.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was found in D-Link DAP-2695 120b36r137_ALL_en_20210528. It has been rated as problematic. This issue affects some unknown processing of the file /adv_macbypass.php of the component…
CVE-2025-4860, published 2025-05-18. Medium severity, CVSS 4.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability classified as problematic has been found in D-Link DAP-2695 120b36r137_ALL_en_20210528. Affected is an unknown function of the file /adv_dhcps.php of the component Static Pool…
CVE-2025-4858, published 2025-05-18. Medium severity, CVSS 4.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability was found in D-Link DAP-2695 120b36r137_ALL_en_20210528. It has been declared as problematic. This vulnerability affects unknown code of the file /adv_arpspoofing.php of the component…
CVE-2022-38873, published 2022-12-20. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. D-Link devices DAP-2310 v2.10rc036 and earlier, DAP-2330 v1.06rc020 and earlier, DAP-2360 v2.10rc050 and earlier, DAP-2553 v3.10rc031 and earlier, DAP-2660 v1.15rc093 and earlier, DAP-2690 v3.20rc106…

Latest

CVE-2025-12295, published 2025-10-27. High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days. A weakness has been identified in D-Link DAP-2695 2.00RC13. The affected element is the function sub_40C6B8 of the component Firmware Update Handler. Executing manipulation can lead to improper…