← Vulnerability feed

Vulnerability record · CVE-2023-44403 · published 3 May 2024

CVE-2023-44403: Dlink dap-1325 firmware os command injection vulnerability

Dlink · Dap 1325 Firmware

D-Link DAP-1325 HNAP SetWLanRadioSettings Channel Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-18822.

8.8 CVSS 3.1 High EPSS 1.1% · top 35.5% CWE-78 · OS command injection
8.8CVSS 3.1 base score
1.1%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

D-Link DAP-1325 HNAP SetWLanRadioSettings Channel Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-18822.

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.zerodayinitiative.com/advisories/ZDI-23-1501/ Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-23-1501/ Third Party Advisory

Track CVE-2023-44403 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2023-44409Dlink dap-1325 firmware stack-based buffer overflow vulnerabilityD-Link DAP-1325 SetSetupWizardStatus Enabled Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjac…EPSS 0.75%8.8CVE-2023-44404Dlink dap-1325 firmware stack-based buffer overflow vulnerabilityD-Link DAP-1325 get_value_from_app Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attack…EPSS 0.75%8.8CVE-2023-44405Dlink dap-1325 firmware stack-based buffer overflow vulnerabilityD-Link DAP-1325 get_value_of_key Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attacker…EPSS 0.75%8.8CVE-2023-44406Dlink dap-1325 firmware stack-based buffer overflow vulnerabilityD-Link DAP-1325 SetAPLanSettings DeviceName Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjace…EPSS 0.75%8.8CVE-2023-44407Dlink dap-1325 firmware stack-based buffer overflow vulnerabilityD-Link DAP-1325 SetAPLanSettings Gateway Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent …EPSS 0.75%8.8CVE-2023-44408Dlink dap-1325 firmware stack-based buffer overflow vulnerabilityD-Link DAP-1325 SetAPLanSettings IPAddr Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent a…EPSS 0.75%8.8CVE-2023-41214Dlink dap-1325 firmware stack-based buffer overflow vulnerabilityD-Link DAP-1325 setDhcpAssignRangeUpdate lan_ipaddr Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows networ…EPSS 1.0%8.8CVE-2023-41208Dlink dap-1325 firmware stack-based buffer overflow vulnerabilityD-Link DAP-1325 SetHostIPv6StaticSettings StaticDefaultGateway Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability al…EPSS 1.0%

Source: NIST National Vulnerability Database (record CVE-2023-44403), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.