[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVFHyywaOiajDveih8smb0sA4hrHQL9GMlBxVKFs6TC4":3,"g5a-ex:dlink\u002Fdap-1325@*":79,"g5a-family:dlink\u002Fdap-1325":81},{"success":4,"data":5},true,{"product":6,"versions":19,"topVulnerabilitiesByEpss":21,"kevVulnerabilities":56,"seoMetadata":57,"meta":76},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":18},"dlink","dap-1325",1,36,0,"2024-05-03",[14],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"a1",35,false,"Dap-1325 by Dlink is a technology product with 1 tracked version and 36 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[20],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},[22,29,32,35,38,41,44,47,50,53],{"cveId":23,"description":24,"publishedDate":12,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":17,"epssScore":28},"CVE-2023-41196","D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticAddress Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-18816.",8.8,"v3.1","High",0.01425,{"cveId":30,"description":31,"publishedDate":12,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":17,"epssScore":28},"CVE-2023-41188","D-Link DAP-1325 HNAP SetAPLanSettings DeviceName Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-18808.",{"cveId":33,"description":34,"publishedDate":12,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":17,"epssScore":28},"CVE-2023-41189","D-Link DAP-1325 HNAP SetAPLanSettings Gateway Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-18809.",{"cveId":36,"description":37,"publishedDate":12,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":17,"epssScore":28},"CVE-2023-41190","D-Link DAP-1325 HNAP SetAPLanSettings IPAddr Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-18810.",{"cveId":39,"description":40,"publishedDate":12,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":17,"epssScore":28},"CVE-2023-41191","D-Link DAP-1325 HNAP SetAPLanSettings Mode Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-18811.",{"cveId":42,"description":43,"publishedDate":12,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":17,"epssScore":28},"CVE-2023-41192","D-Link DAP-1325 HNAP SetAPLanSettings PrimaryDNS Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-18812.",{"cveId":45,"description":46,"publishedDate":12,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":17,"epssScore":28},"CVE-2023-41193","D-Link DAP-1325 HNAP SetAPLanSettings SecondaryDNS Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-18813.",{"cveId":48,"description":49,"publishedDate":12,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":17,"epssScore":28},"CVE-2023-41194","D-Link DAP-1325 HNAP SetAPLanSettings SubnetMask Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-18814.",{"cveId":51,"description":52,"publishedDate":12,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":17,"epssScore":28},"CVE-2023-41195","D-Link DAP-1325 HNAP SetHostIPv6Settings IPv6Mode Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-18815.",{"cveId":54,"description":55,"publishedDate":12,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":17,"epssScore":28},"CVE-2023-41197","D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticDefaultGateway Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-18817.",[],{"title":58,"metaDescription":59,"keywords":60,"structuredData":61},"Dap-1325 by Dlink - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Dap-1325 by Dlink covering 1 version with 36 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Dap-1325 vulnerabilities, Dap-1325 security, Dap-1325 CVE, Dlink Dap-1325, Dap-1325 threat intelligence, Dlink security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":62,"@type":63,"name":64,"description":59,"url":65,"manufacturer":66,"applicationCategory":70,"softwareVersion":71,"mainEntity":72},"https:\u002F\u002Fschema.org","SoftwareApplication","Dap-1325","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fdlink\u002Fdap-1325",{"@type":67,"name":68,"url":69},"Organization","Dlink","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fdlink","Security Software","1 versions tracked",{"@type":73,"name":74,"description":75,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Dap-1325 Security Vulnerabilities","Security vulnerabilities affecting Dap-1325 by Dlink",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":77,"apiVersion":78},"2026-10-17T20:40:24.445Z","3.0",{"rows":80,"total":11,"capped":17,"failed":11},[],[82],{"product":83,"cves":10},"dap-1325_firmware"]