CVE-2023-41186

Name of the Vulnerable Software and Affected Versions D-Link DAP-1325 (affected versions not specified)

Description This issue allows network-adjacent attackers to access various functionality on affected installations of D-Link DAP-1325 routers without requiring authentication. The flaw exists within the implementation of the CGI interface due to the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.