Lucene search
+L

165 matches found

Cvelist
Cvelist
added 2024/05/03 2:11 a.m.61 views

CVE-2023-41192 D-Link DAP-1325 HNAP SetAPLanSettings PrimaryDNS Command Injection Remote Code Execution Vulnerability

D-Link DAP-1325 HNAP SetAPLanSettings PrimaryDNS Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability...

8.8CVSS9.3AI score0.01425EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/03 2:11 a.m.64 views

CVE-2023-41189 D-Link DAP-1325 HNAP SetAPLanSettings Gateway Command Injection Remote Code Execution Vulnerability

D-Link DAP-1325 HNAP SetAPLanSettings Gateway Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. T...

8.8CVSS9.3AI score0.01425EPSS
SaveExploits0References2
CVE
CVE
added 2024/05/03 2:11 a.m.101 views

CVE-2023-41188

CVE-2023-41188 affects D-Link DAP-1325 routers. The root cause is improper validation of a user-supplied string in the HNAP1 SOAP endpoint’s SetAPLanSettings DeviceName parameter, leading to remote code execution with root privileges. Exploitation requires network adjacency and no authentication....

8.8CVSS9.1AI score0.01425EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2023/10/10 11:15 a.m.32 views

CVE-2023-43625

A vulnerability has been identified in Simcenter Amesim All versions V2021.1. The affected application contains a SOAP endpoint that could allow an unauthenticated remote attacker to perform DLL injection and execute arbitrary code in the context of the affected application process...

9.8CVSS9.8AI score0.01158EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/10 11:15 a.m.8 views

CVE-2023-43625

A vulnerability has been identified in Simcenter Amesim All versions V2021.1. The affected application contains a SOAP endpoint that could allow an unauthenticated remote attacker to perform DLL injection and execute arbitrary code in the context of the affected application process...

9.8CVSS6.1AI score0.01158EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/10/10 10:21 a.m.8 views

CVE-2023-43625

A vulnerability has been identified in Simcenter Amesim All versions V2021.1. The affected application contains a SOAP endpoint that could allow an unauthenticated remote attacker to perform DLL injection and execute arbitrary code in the context of the affected application process...

9.8CVSS9.7AI score0.01158EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/10/10 10:21 a.m.32 views

CVE-2023-43625

A vulnerability has been identified in Simcenter Amesim All versions V2021.1. The affected application contains a SOAP endpoint that could allow an unauthenticated remote attacker to perform DLL injection and execute arbitrary code in the context of the affected application process...

9.8CVSS9.8AI score0.01158EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/10/04 12:00 a.m.33 views

(0Day) D-Link DAP-1325 get_value_of_key Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of XML data provided to the HNAP1 SOAP endpoint. The issu...

8.8CVSS7.3AI score0.0075EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/10/04 12:00 a.m.14 views

PT-2023-6107 · D Link · D-Link Dap-1325

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1325 affected versions not specified Description: The issue is related to a buffer overflow in the D-Link DAP-1325 wireless signal amplifier's firmware, allowing remote attackers to execute arbitrary code. This is due to the lack o...

8.8CVSS8.2AI score0.0075EPSS
SaveExploits0References6
Zero Day Initiative
Zero Day Initiative
added 2023/10/04 12:00 a.m.24 views

(0Day) D-Link DAP-1325 HNAP SetWLanRadioSettings Channel Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoin...

8.8CVSS7.3AI score0.01109EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/10/04 12:00 a.m.16 views

PT-2023-5695 · D Link · D-Link Dap-1325

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1325 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. The flaw exists within the handling of XML data provided...

8.8CVSS7.4AI score0.0075EPSS
SaveExploits0References6
Zero Day Initiative
Zero Day Initiative
added 2023/10/04 12:00 a.m.30 views

(0Day) D-Link DAP-1325 SetAPLanSettings DeviceName Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of XML data provided to the HNAP1 SOAP endpoint. The issu...

8.8CVSS7.3AI score0.0075EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2023/10/04 12:00 a.m.27 views

(0Day) D-Link DAP-1325 get_value_from_app Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of XML data provided to the HNAP1 SOAP endpoint. The issu...

8.8CVSS7.3AI score0.0075EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2023/10/04 12:00 a.m.29 views

(0Day) D-Link DAP-1325 SetAPLanSettings Gateway Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of XML data provided to the HNAP1 SOAP endpoint. The issu...

8.8CVSS7.3AI score0.0075EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.34 views

D-Link DAP-1325 HNAP SetAPLanSettings Gateway Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoin...

8.8CVSS7.3AI score0.01425EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.24 views

D-Link DAP-1325 HNAP SetAPLanSettings IPAddr Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoin...

8.8CVSS7.3AI score0.01425EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.31 views

D-Link DAP-1325 SetAPLanSettings PrimaryDNS Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of XML data provided to the HNAP1 SOAP endpoint. The issu...

8.8CVSS7.3AI score0.01049EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.25 views

D-Link DAP-1325 HNAP SetHostIPv6Settings IPv6Mode Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoin...

8.8CVSS7.3AI score0.01425EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.31 views

D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticDefaultGateway Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoin...

8.8CVSS7.3AI score0.01425EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.28 views

D-Link DAP-1325 SetAPLanSettings SubnetMask Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of XML data provided to the HNAP1 SOAP endpoint. The issu...

8.8CVSS7.3AI score0.01049EPSS
SaveExploits0References1
Rows per page
Query Builder