D-Link DAP-1325 SetHostIPv6StaticSettings StaticDNS1 Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2023-41209

Summary

The vulnerability identified in D-Link DAP-1325 routers is caused by improper validation of XML data received by the HNAP1 SOAP endpoint. Attackers who are within the network have the ability to exploit this flaw, resulting in a stack-based buffer overflow. The lack of sufficient checks allows an attacker to execute arbitrary code in the context of root, potentially leading to unauthorized access and control over the device. No authentication is required to exploit this vulnerability, highlighting the need for immediate action to secure affected systems.

References