[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$flgSP7nxtGIpk1Zq66ApKavE7zDSVr5oP-P-SFaVa5Ls":3,"g5a-ex:dlink\u002Fdap-1325_firmware@*":81,"g5a-family:dlink\u002Fdap-1325_firmware":83},{"success":4,"data":5},true,{"product":6,"versions":20,"topVulnerabilitiesByEpss":23,"kevVulnerabilities":58,"seoMetadata":59,"meta":78},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":19},"dlink","dap-1325_firmware",2,36,0,"2024-05-03",[14,17],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"1.01",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"1.07b01","Dap-1325 Firmware by Dlink is a technology product with 2 tracked versions and 36 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[21,22],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},[24,31,34,37,40,43,46,49,52,55],{"cveId":25,"description":26,"publishedDate":12,"cvssScore":27,"cvssVersion":28,"severity":29,"isKev":16,"epssScore":30},"CVE-2023-41196","D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticAddress Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-18816.",8.8,"v3.1","High",0.01425,{"cveId":32,"description":33,"publishedDate":12,"cvssScore":27,"cvssVersion":28,"severity":29,"isKev":16,"epssScore":30},"CVE-2023-41188","D-Link DAP-1325 HNAP SetAPLanSettings DeviceName Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-18808.",{"cveId":35,"description":36,"publishedDate":12,"cvssScore":27,"cvssVersion":28,"severity":29,"isKev":16,"epssScore":30},"CVE-2023-41189","D-Link DAP-1325 HNAP SetAPLanSettings Gateway Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-18809.",{"cveId":38,"description":39,"publishedDate":12,"cvssScore":27,"cvssVersion":28,"severity":29,"isKev":16,"epssScore":30},"CVE-2023-41190","D-Link DAP-1325 HNAP SetAPLanSettings IPAddr Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-18810.",{"cveId":41,"description":42,"publishedDate":12,"cvssScore":27,"cvssVersion":28,"severity":29,"isKev":16,"epssScore":30},"CVE-2023-41191","D-Link DAP-1325 HNAP SetAPLanSettings Mode Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-18811.",{"cveId":44,"description":45,"publishedDate":12,"cvssScore":27,"cvssVersion":28,"severity":29,"isKev":16,"epssScore":30},"CVE-2023-41192","D-Link DAP-1325 HNAP SetAPLanSettings PrimaryDNS Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-18812.",{"cveId":47,"description":48,"publishedDate":12,"cvssScore":27,"cvssVersion":28,"severity":29,"isKev":16,"epssScore":30},"CVE-2023-41193","D-Link DAP-1325 HNAP SetAPLanSettings SecondaryDNS Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-18813.",{"cveId":50,"description":51,"publishedDate":12,"cvssScore":27,"cvssVersion":28,"severity":29,"isKev":16,"epssScore":30},"CVE-2023-41194","D-Link DAP-1325 HNAP SetAPLanSettings SubnetMask Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-18814.",{"cveId":53,"description":54,"publishedDate":12,"cvssScore":27,"cvssVersion":28,"severity":29,"isKev":16,"epssScore":30},"CVE-2023-41195","D-Link DAP-1325 HNAP SetHostIPv6Settings IPv6Mode Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-18815.",{"cveId":56,"description":57,"publishedDate":12,"cvssScore":27,"cvssVersion":28,"severity":29,"isKev":16,"epssScore":30},"CVE-2023-41197","D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticDefaultGateway Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-18817.",[],{"title":60,"metaDescription":61,"keywords":62,"structuredData":63},"Dap-1325 Firmware by Dlink - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Dap-1325 Firmware by Dlink covering 2 versions with 36 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Dap-1325 Firmware vulnerabilities, Dap-1325 Firmware security, Dap-1325 Firmware CVE, Dlink Dap-1325 Firmware, Dap-1325 Firmware threat intelligence, Dlink security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":64,"@type":65,"name":66,"description":61,"url":67,"manufacturer":68,"applicationCategory":72,"softwareVersion":73,"mainEntity":74},"https:\u002F\u002Fschema.org","SoftwareApplication","Dap-1325 Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fdlink\u002Fdap-1325_firmware",{"@type":69,"name":70,"url":71},"Organization","Dlink","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fdlink","Security Software","2 versions tracked",{"@type":75,"name":76,"description":77,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Dap-1325 Firmware Security Vulnerabilities","Security vulnerabilities affecting Dap-1325 Firmware by Dlink",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":79,"apiVersion":80},"2026-10-17T20:40:24.375Z","3.0",{"rows":82,"total":11,"capped":16,"failed":11},[],[]]