CVE-2023-41194

Name of the Vulnerable Software and Affected Versions D-Link DAP-1325 (affected versions not specified)

Description This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this issue. The specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoint, specifically the SetAPLanSettings function. The issue results from the lack of proper validation of a user-supplied string, the SubnetMask parameter, before using it to execute a system call. An attacker can leverage this issue to execute code in the context of root.

Recommendations At the moment, there is no information about a newer version that contains a fix for this issue. As a temporary workaround, consider disabling the SetAPLanSettings function or restricting access to the HNAP1 SOAP endpoint until a patch is available. Avoid using the SubnetMask parameter in the affected API endpoint until the issue is resolved.