PT-2022-6976 · D Link · D-Link Dap-1325
Dmitry Janushkevich
+1
·
Published
2022-09-26
·
Updated
2024-05-04
·
CVE-2023-41194
CVSS v3.1
8.8
High
| Vector | AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
D-Link DAP-1325 (affected versions not specified)
Description
This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this issue. The specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoint, specifically the
SetAPLanSettings function. The issue results from the lack of proper validation of a user-supplied string, the SubnetMask parameter, before using it to execute a system call. An attacker can leverage this issue to execute code in the context of root.Recommendations
At the moment, there is no information about a newer version that contains a fix for this issue. As a temporary workaround, consider disabling the
SetAPLanSettings function or restricting access to the HNAP1 SOAP endpoint until a patch is available. Avoid using the SubnetMask parameter in the affected API endpoint until the issue is resolved.Fix
OS Command Injection
Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
D-Link Dap-1325