What is the CVSS score of CVE-2025-5572?

CVE-2025-5572 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.3%.

Which versions of Dcs 932l Firmware are affected by CVE-2025-5572?

A critical remote code execution vulnerability affects D-Link DCS-932L IP cameras (firmware 2.18.01) with no vendor patch available.

Is there a public PoC exploit available for CVE-2025-5572?

Yes, a public proof-of-concept exploit is available for CVE-2025-5572. Prioritise patching immediately. EPSS: 0.3%.

How to fix or mitigate CVE-2025-5572?

Within 24 hours: Inventory all D-Link DCS-932L devices in production and isolate affected units from internet-facing access; document business justification for any retained systems. Within 7 days: Implement network segmentation to restrict access to these devices to essential personnel only, disable remote management interfaces, and deploy WAF/IDS rules to block exploitation attempts. Within 30 days: Replace affected devices with supported alternatives or retire the hardware; if replacement is operationally infeasible, engage D-Link for extended support or consider third-party security appliances that can proxy/filter traffic to these devices.

Dcs 932l Firmware CVE-2025-5572

EUVD-2025-16840 HIGH

Buffer Overflow (CWE-119)

2025-06-04 cna@vuldb.com

Buffer Overflow D-Link Dcs 932l Firmware

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 14, 2026 - 17:29 euvd

EUVD-2025-16840

Analysis Generated

Mar 14, 2026 - 17:29 vuln.today

PoC Detected

Jun 06, 2025 - 18:48 vuln.today

Public exploit code

CVE Published

Jun 04, 2025 - 06:15 nvd

HIGH 8.8

DescriptionCVE.org

A vulnerability was found in D-Link DCS-932L 2.18.01. It has been declared as critical. Affected by this vulnerability is the function setSystemEmail of the file /setSystemEmail. The manipulation of the argument EmailSMTPPortNumber leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

AnalysisAI

A critical stack-based buffer overflow vulnerability exists in D-Link DCS-932L camera firmware version 2.18.01 in the setSystemEmail function, allowing authenticated remote attackers to achieve complete system compromise (confidentiality, integrity, and availability). The vulnerability has been publicly disclosed with proof-of-concept code available, affecting end-of-life products no longer receiving vendor support.

Technical ContextAI

The vulnerability is a stack-based buffer overflow (CWE-119) in the setSystemEmail endpoint (/setSystemEmail) of the D-Link DCS-932L IP camera firmware. The EmailSMTPPortNumber parameter lacks proper input validation and bounds checking, allowing an attacker to write beyond allocated stack memory. This class of memory corruption vulnerability can lead to arbitrary code execution by overwriting return addresses or function pointers on the stack. The DCS-932L is a network-attached surveillance camera running embedded firmware; the affected component handles SMTP email configuration for alert notifications. CPE identification: cpe:2.3:a:d-link:dcs-932l_firmware:2.18.01:*:*:*:*:*:*:*