D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticDNS2 Command Injection Remote Code Execution Vulnerability

CVE-2023-41199

What is CVE-2023-41199?

A vulnerability has been identified in D-Link DAP-1325 routers, specifically in the handling of parameters sent to the HNAP1 SOAP endpoint. The vulnerability arises due to the inadequate validation of user-provided data, which can lead to arbitrary command execution. Attackers situated on the same network can exploit this flaw, enabling them to execute commands with root privileges on affected devices without needing authentication. This represents a significant security risk, potentially allowing unauthorized access and manipulation of sensitive systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References