Dap-1325 Firmware vulnerabilities

36 known vulnerabilities in Dap-1325 Firmware from D-Link. 36 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

36vulnerabilities

0critical

36high

0exploited

8.8average CVSS score

Latest first

7.5 High severity
DAP-1325: Missing Authentication for Critical Functionality
CVE-2023-53896Dec 16, 2025D-Link
D-Link DAP-1325 firmware version 1.01 contains a broken access control vulnerability that allows unauthenticated attackers to download device configuration settings without authentication. Attackers can exploit the /cgi-bin/ExportSettings.sh endpoint to retrie
8.8 High severity
DAP-1325: Out-of-bounds Write
CVE-2023-44409May 3, 2024D-Link
D-Link DAP-1325 SetSetupWizardStatus Enabled Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is
8.8 High severity
DAP-1325: Out-of-bounds Write
CVE-2023-44408May 3, 2024D-Link
D-Link DAP-1325 SetAPLanSettings IPAddr Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not
8.8 High severity
DAP-1325: Out-of-bounds Write
CVE-2023-44407May 3, 2024D-Link
D-Link DAP-1325 SetAPLanSettings Gateway Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not
8.8 High severity
DAP-1325: Out-of-bounds Write
CVE-2023-44406May 3, 2024D-Link
D-Link DAP-1325 SetAPLanSettings DeviceName Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is
8.8 High severity
DAP-1325: Out-of-bounds Write
CVE-2023-44405May 3, 2024D-Link
D-Link DAP-1325 get_value_of_key Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not require
8.8 High severity
DAP-1325: Out-of-bounds Write
CVE-2023-44404May 3, 2024D-Link
D-Link DAP-1325 get_value_from_app Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not requi
8.8 High severity
DAP-1325: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-44403May 3, 2024D-LinkEPSS 1.35%
D-Link DAP-1325 HNAP SetWLanRadioSettings Channel Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not
8.8 High severity
DAP-1325: Out-of-bounds Write
CVE-2023-41214May 3, 2024D-LinkEPSS 1.05%
D-Link DAP-1325 setDhcpAssignRangeUpdate lan_ipaddr Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentica
8.8 High severity
DAP-1325: Out-of-bounds Write
CVE-2023-41213May 3, 2024D-LinkEPSS 1.05%
D-Link DAP-1325 setDhcpAssignRangeUpdate lan_ipaddr Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentica
8.8 High severity
DAP-1325: Out-of-bounds Write
CVE-2023-41212May 3, 2024D-LinkEPSS 1.05%
D-Link DAP-1325 SetTriggerAPValidate Key Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not
8.8 High severity
DAP-1325: Out-of-bounds Write
CVE-2023-41211May 3, 2024D-LinkEPSS 1.05%
D-Link DAP-1325 SetHostIPv6StaticSettings StaticPrefixLength Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. A
8.8 High severity
DAP-1325: Out-of-bounds Write
CVE-2023-41210May 3, 2024D-LinkEPSS 1.05%
D-Link DAP-1325 SetHostIPv6StaticSettings StaticDNS2 Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentic
8.8 High severity
DAP-1325: Out-of-bounds Write
CVE-2023-41209May 3, 2024D-LinkEPSS 1.05%
D-Link DAP-1325 SetHostIPv6StaticSettings StaticDNS1 Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentic
8.8 High severity
DAP-1325: Out-of-bounds Write
CVE-2023-41208May 3, 2024D-LinkEPSS 1.05%
D-Link DAP-1325 SetHostIPv6StaticSettings StaticDefaultGateway Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers.
8.8 High severity
DAP-1325: Out-of-bounds Write
CVE-2023-41207May 3, 2024D-LinkEPSS 1.05%
D-Link DAP-1325 SetHostIPv6StaticSettings StaticAddress Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authen
8.8 High severity
DAP-1325: Out-of-bounds Write
CVE-2023-41206May 3, 2024D-LinkEPSS 1.05%
D-Link DAP-1325 SetHostIPv6Settings IPv6Mode Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is
8.8 High severity
DAP-1325: Out-of-bounds Write
CVE-2023-41205May 3, 2024D-LinkEPSS 1.05%
D-Link DAP-1325 SetAPLanSettings SubnetMask Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is
8.8 High severity
DAP-1325: Out-of-bounds Write
CVE-2023-41204May 3, 2024D-LinkEPSS 1.05%
D-Link DAP-1325 SetAPLanSettings SecondaryDNS Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication i
8.8 High severity
DAP-1325: Out-of-bounds Write
CVE-2023-41203May 3, 2024D-LinkEPSS 1.05%
D-Link DAP-1325 SetAPLanSettings PrimaryDNS Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is
8.8 High severity
DAP-1325: Out-of-bounds Write
CVE-2023-41202May 3, 2024D-LinkEPSS 1.05%
D-Link DAP-1325 SetAPLanSettings Mode Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not re
8.8 High severity
DAP-1325: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-41201May 3, 2024D-LinkEPSS 1.43%
D-Link DAP-1325 HNAP SetSetupWizardStatus Enabled Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not
8.8 High severity
DAP-1325: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-41200May 3, 2024D-LinkEPSS 1.43%
D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticPrefixLength Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authen
8.8 High severity
DAP-1325: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-41199May 3, 2024D-LinkEPSS 1.43%
D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticDNS2 Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication
8.8 High severity
DAP-1325: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-41198May 3, 2024D-LinkEPSS 1.43%
D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticDNS1 Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication
8.8 High severity
DAP-1325: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-41197May 3, 2024D-LinkEPSS 1.43%
D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticDefaultGateway Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Auth
8.8 High severity
DAP-1325: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-41196May 3, 2024D-LinkEPSS 1.43%
D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticAddress Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authenticat
8.8 High severity
DAP-1325: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-41195May 3, 2024D-LinkEPSS 1.43%
D-Link DAP-1325 HNAP SetHostIPv6Settings IPv6Mode Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not
8.8 High severity
DAP-1325: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-41194May 3, 2024D-LinkEPSS 1.43%
D-Link DAP-1325 HNAP SetAPLanSettings SubnetMask Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not r
8.8 High severity
DAP-1325: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-41193May 3, 2024D-LinkEPSS 1.43%
D-Link DAP-1325 HNAP SetAPLanSettings SecondaryDNS Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not
8.8 High severity
DAP-1325: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-41192May 3, 2024D-LinkEPSS 1.43%
D-Link DAP-1325 HNAP SetAPLanSettings PrimaryDNS Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not r
8.8 High severity
DAP-1325: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-41191May 3, 2024D-LinkEPSS 1.43%
D-Link DAP-1325 HNAP SetAPLanSettings Mode Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not require
8.8 High severity
DAP-1325: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-41190May 3, 2024D-LinkEPSS 1.43%
D-Link DAP-1325 HNAP SetAPLanSettings IPAddr Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not requi
8.8 High severity
DAP-1325: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-41189May 3, 2024D-LinkEPSS 1.43%
D-Link DAP-1325 HNAP SetAPLanSettings Gateway Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not requ
8.8 High severity
DAP-1325: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-41188May 3, 2024D-LinkEPSS 1.43%
D-Link DAP-1325 HNAP SetAPLanSettings DeviceName Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not r
8.8 High severity
DAP-1325: Missing Authentication for Critical Functionality
CVE-2023-41187May 3, 2024D-LinkEPSS 1.01%
D-Link DAP-1325 HNAP Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this