D-Link DAP-1325 SetTriggerAPValidate Key Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2023-41212

Summary

The D-Link DAP-1325 router is vulnerable to a stack-based buffer overflow, which can be exploited by network-adjacent attackers to execute arbitrary code. This vulnerability arises from inadequate validation of the length of XML data processed by the HNAP1 SOAP endpoint. When user-supplied data exceeds the buffer capacity, it can overwrite adjacent memory on the stack, allowing an attacker to gain control over the system. Notably, this issue does not require authentication, increasing the risk of successful exploitation. Users of affected DAP-1325 routers are strongly advised to apply available security patches as soon as possible to mitigate the risks associated with this vulnerability.

References