CVE-2023-41195

D-Link DAP-1325 is affected by CVE-2023-41195 via the HNAP1 SOAP endpoint, SetHostIPv6Settings IPv6Mode. The flaw allows unauthenticated network-adjacent attackers to trigger a command injection and gain code execution as root by supplying a crafted IPv6Mode value. Affected component: SetHostIPv6...

CVE-2023-41195 D-Link DAP-1325 HNAP SetHostIPv6Settings IPv6Mode Command Injection Remote Code Execution Vulnerability

D-Link DAP-1325 HNAP SetHostIPv6Settings IPv6Mode Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerabilit...