D-Link DAP-1325 SetHostIPv6StaticSettings StaticPrefixLength Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2023-41211

What is CVE-2023-41211?

A vulnerability associated with the D-Link DAP-1325 routers allows network-adjacent attackers to execute arbitrary code. The flaw resides in the handling of XML data at the HNAP1 SOAP endpoint, where insufficient validation of user-supplied data length leads to a stack-based buffer overflow. This vulnerability permits attackers to execute code in the context of root without requiring any authentication, exposing devices to significant risk. For further details, see the vendor advisory from D-Link and the Zero Day Initiative's advisory for additional context.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References