Lucene search
K

16763 matches found

Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:0 a.m.•15 views

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.7AI score0.00406EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:0 a.m.•16 views

PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.8AI score0.0043EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:0 a.m.•16 views

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.7AI score0.00406EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:0 a.m.•19 views

PDF-XChange Editor App Object Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS6.7AI score0.00406EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:0 a.m.•17 views

PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.9AI score0.00391EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:0 a.m.•21 views

PDF-XChange Editor Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS6.8AI score0.0043EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:0 a.m.•13 views

PDF-XChange Editor JP2 File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.9AI score0.00406EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:0 a.m.•14 views

PDF-XChange Editor J2K File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.7AI score0.00406EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:0 a.m.•13 views

PDF-XChange Editor EMF File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS6AI score0.00415EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:0 a.m.•16 views

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.8AI score0.00406EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:0 a.m.•12 views

PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.9AI score0.00391EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:0 a.m.•15 views

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.7AI score0.00406EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:0 a.m.•15 views

PDF-XChange Editor J2K File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.9AI score0.00391EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:0 a.m.•22 views

PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.9AI score0.00391EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:0 a.m.•20 views

PDF-XChange Editor J2K File Parsing Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS6AI score0.00415EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:0 a.m.•17 views

PDF-XChange Editor U3D File Parsing Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS6AI score0.00415EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:0 a.m.•11 views

PDF-XChange Editor JPG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.7AI score0.00406EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:0 a.m.•15 views

PDF-XChange Editor Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.9AI score0.00391EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:0 a.m.•18 views

PDF-XChange Editor JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.9AI score0.00391EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:0 a.m.•22 views

PDF-XChange Editor U3D File Parsing Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.8AI score0.0043EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:0 a.m.•15 views

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.7AI score0.00406EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:0 a.m.•13 views

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.7AI score0.00406EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:0 a.m.•22 views

PDF-XChange Editor JPG File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.8AI score0.0043EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:0 a.m.•23 views

D-Link DIR-3040 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.3AI score0.00705EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:0 a.m.•20 views

D-Link DAP-1325 SetHostIPv6Settings IPv6Mode Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of XML data provided to the HNAP1 SOAP endpoint. The issu...

8.8CVSS7.3AI score0.00855EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:0 a.m.•35 views

Synology RT6600ax info.cgi Exposure of Sensitive Data Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Synology RT6600ax routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the info.cgi file. The issue results from the exposure of sensitive da...

5.3CVSS6.1AI score0.00687EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:0 a.m.•27 views

Synology RT6600ax uistrings.cgi Path Traversal Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Synology RT6600ax routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the uistrings.cgi file. The issue results from the lack of...

4.3CVSS6AI score0.00759EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:0 a.m.•28 views

Synology RT6600ax WEB API Endpoint Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology RT6600ax routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the WEB API endpoint. The issue results from the lack of proper validati...

8CVSS7.3AI score0.01491EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:0 a.m.•18 views

Synology RT6600ax SYNO.Core Uncontrolled Resource Consumption Denial-of-Service Vulnerability

This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Synology RT6600ax routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the SYNO.Core file. The issue results from uncontrolled...

5.7CVSS6.5AI score0.0074EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:0 a.m.•20 views

D-Link DIR-3040 HTTP Request Processing Referer Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

7.5CVSS7.3AI score0.00759EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:0 a.m.•22 views

D-Link DIR-3040 prog.cgi SetUsersSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.3AI score0.00705EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:0 a.m.•22 views

D-Link DIR-3040 HTTP Request Processing Referer Heap-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

8.8CVSS7.3AI score0.00846EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:0 a.m.•19 views

D-Link DIR-3040 prog.cgi SetTriggerPPPoEValidate Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.3AI score0.00705EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:0 a.m.•25 views

D-Link DIR-3040 prog.cgi SetDeviceSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.3AI score0.00705EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:0 a.m.•16 views

D-Link DIR-3040 prog.cgi SetQuickVPNSettings PSK Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.3AI score0.00705EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:0 a.m.•27 views

D-Link DIR-3040 prog.cgi SetWan2Settings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.3AI score0.00705EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:0 a.m.•23 views

D-Link DIR-3040 prog.cgi SetSysEmailSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.3AI score0.00705EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:0 a.m.•22 views

D-Link DIR-3040 prog.cgi SetWan3Settings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.3AI score0.00705EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:0 a.m.•25 views

D-Link DIR-3040 prog.cgi SetWanSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.3AI score0.00705EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:0 a.m.•21 views

D-Link DIR-3040 prog.cgi SetDynamicDNSSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.3AI score0.00705EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:0 a.m.•21 views

D-Link DAP-1325 CGI Missing Authentication Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to access various functionality on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the CGI interface. The issue results from...

6.5CVSS6.6AI score0.00682EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:0 a.m.•27 views

D-Link DIR-3040 prog.cgi SetQuickVPNSettings Password Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

7.1CVSS7.3AI score0.00584EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:0 a.m.•25 views

D-Link DAP-1325 HNAP Missing Authentication Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the HNAP interface. The issue results from the...

8.8CVSS7.5AI score0.00826EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:0 a.m.•23 views

D-Link DAP-1325 SetTriggerAPValidate Key Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of XML data provided to the HNAP1 SOAP endpoint. The issu...

8.8CVSS7.3AI score0.00855EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:0 a.m.•23 views

D-Link DAP-1325 SetHostIPv6StaticSettings StaticPrefixLength Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of XML data provided to the HNAP1 SOAP endpoint. The issu...

8.8CVSS7.3AI score0.00855EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:0 a.m.•17 views

D-Link DAP-1325 setDhcpAssignRangeUpdate lan_ipaddr Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of XML data provided to the HNAP1 SOAP endpoint. The issu...

8.8CVSS7.3AI score0.00855EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:0 a.m.•22 views

D-Link DAP-1325 SetHostIPv6StaticSettings StaticDNS2 Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of XML data provided to the HNAP1 SOAP endpoint. The issu...

8.8CVSS7.3AI score0.00855EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:0 a.m.•26 views

D-Link DAP-1325 SetHostIPv6StaticSettings StaticDefaultGateway Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of XML data provided to the HNAP1 SOAP endpoint. The issu...

8.8CVSS7.3AI score0.00855EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:0 a.m.•14 views

D-Link DAP-1325 SetHostIPv6StaticSettings StaticAddress Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of XML data provided to the HNAP1 SOAP endpoint. The issu...

8.8CVSS7.3AI score0.00855EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:0 a.m.•22 views

D-Link DAP-1325 SetAPLanSettings SubnetMask Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of XML data provided to the HNAP1 SOAP endpoint. The issu...

8.8CVSS7.3AI score0.00855EPSS
Exploits0References1
Total number of security vulnerabilities16763