CVE-2023-41201 D-Link DAP-1325 HNAP SetSetupWizardStatus Enabled Command Injection Remote Code Execution Vulnerability

D-Link DAP-1325 HNAP SetSetupWizardStatus Enabled Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerabilit...

CVE-2023-41201

The CVE concerns D-Link DAP-1325 with a command-injection path in the HNAP1 SOAP endpoint. Affected component: SetSetupWizardStatus handling within DAP-1325 devices. Root cause: improper validation of a user-supplied string before it is used to execute a system call, enabling remote code executio...