CVE-2023-41199

CVE-2023-41199 affects D-Link DAP-1325 routers. The vulnerability lies in the HNAP1 SOAP endpoint’s handling of a parameter to SetHostIPv6StaticSettings (StaticDNS2): no validation of a user-supplied string allows an attacker, from a network-adjacent position, to trigger a system call and execute...

CVE-2023-41199 D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticDNS2 Command Injection Remote Code Execution Vulnerability

D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticDNS2 Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this...