D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticDNS1 Command Injection Remote Code Execution Vulnerability
CVE-2023-41198

8.8HIGH

Key Information:

Vendor

D-link
Status
Dap-1325
Vendor
CVE Published:
3 May 2024

What is CVE-2023-41198?

The D-Link DAP-1325 router is susceptible to a command injection vulnerability in the HNAP1 SOAP endpoint, which allows network-adjacent attackers to execute arbitrary code. This flaw stems from inadequate validation of user input provided in request parameters, enabling attackers to perform unauthorized actions without authentication. Successful exploitation can lead to code execution with root privileges, posing a significant threat to the integrity of the network and its connected devices.

Affected Version(s)

DAP-1325 1.07b01

References

https://www.zerodayinitiative.com/advisories/ZDI-23-1306/
x_research-advisory
https://supportannouncement.us.dlink.com/announcement/pub...
vendor-advisory

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.