D-Link DAP-1325 setDhcpAssignRangeUpdate lan_ipaddr Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2023-41213

Summary

A security vulnerability exists in the D-Link DAP-1325 routers that allows network-adjacent attackers to execute arbitrary code. This vulnerability originates from a flaw in how XML data is processed by the HNAP1 SOAP endpoint. Specifically, insufficient validation of the length of user-supplied data enables an attacker to manipulate the buffer, leading to stack-based buffer overflow. This exploitation does not require authentication, making it particularly concerning for users of affected devices. The vulnerability was documented under the reference ZDI-CAN-18840.

References