Vulnerability DatabaseCVE-2023-1307

CVE-2023-1307:
PHP vulnerability analysis and mitigation

Overview

A vulnerability was identified in D-Link DAP-1325 routers, tracked as CVE-2023-41199. The flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoint, specifically in the SetHostIPv6StaticSettings StaticDNS2 functionality. This security issue was discovered and reported through the Zero Day Initiative program (Zero Day Initiative).

Technical details

The vulnerability stems from improper validation of user-supplied strings before their use in system calls. It has been assigned a CVSS score of 8.8 (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating its high severity. The vulnerability specifically affects the HNAP1 SOAP endpoint in D-Link DAP-1325 routers (Zero Day Initiative).

Impact

When successfully exploited, this vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DAP-1325 routers. The code execution occurs in the context of root, providing attackers with the highest level of system privileges. No authentication is required to exploit this vulnerability (Zero Day Initiative).

Mitigation and workarounds

D-Link has released an update to address this vulnerability. Users are advised to apply the security update as detailed in the D-Link support announcement (Zero Day Initiative).