D-Link DAP-1325 SetAPLanSettings PrimaryDNS Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2023-41203

Summary

The vulnerability identified in D-Link DAP-1325 routers involves a stack-based buffer overflow that occurs due to inadequate validation of XML data length supplied to the HNAP1 SOAP endpoint. Attackers with network access can exploit this flaw to execute arbitrary code on the device without requiring authentication, enabling them to gain root level access. The lack of stringent checks on user input poses significant risks for users of this router model.

References