D-Link DAP-1325 setDhcpAssignRangeUpdate lan_ipaddr Stack-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2023-41214

8.8HIGH

Key Information:

Vendor
D-link
Status
Dap-1325
Vendor
CVE Published:
3 May 2024

Summary

The D-Link DAP-1325 router has a vulnerability in its handling of XML data transmitted through the HNAP1 SOAP endpoint. This flaw stems from inadequate validation of user-input length, leading to a stack-based buffer overflow. An attacker in proximity to the network can exploit this vulnerability to execute arbitrary code in the context of the root user. Importantly, this exploit does not require authentication, which heightens the risk to users of affected D-Link routers. Ensuring robust security measures and timely firmware updates is crucial to mitigate these risks.

Affected Version(s)

DAP-1325 1.07b01

References

https://www.zerodayinitiative.com/advisories/ZDI-23-1295/
x_research-advisory
https://supportannouncement.us.dlink.com/announcement/pub...
vendor-advisory

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.