D-Link DAP-1325 SetAPLanSettings SubnetMask Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2023-41205

Summary

A stack-based buffer overflow vulnerability exists in the D-Link DAP-1325 routers, specifically within the handling of XML data used by the HNAP1 SOAP endpoint. This flaw arises from inadequate validation of user-supplied data length before it is copied into a fixed-length stack buffer. As a result, network-adjacent attackers have the potential to execute arbitrary code on the affected system without the need for authentication. This significant security issue emphasizes the importance of robust input validation in network devices.

References