CVE-2023-41190— D-Link DAP-1325 安全漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2023-41190の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
D-Link DAP-1325 HNAP SetAPLanSettings IPAddr Command Injection Remote Code Execution Vulnerability
ソース: NVD (National Vulnerability Database)
脆弱性説明
D-Link DAP-1325 HNAP SetAPLanSettings IPAddr Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-18810.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
D-Link DAP-1325 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
D-Link DAP-1325是中国友讯（D-Link）公司的一款无线接入点/桥接器，主要用于提供无线网络覆盖，并具备桥接功能，可以将有线网络转换为无线网络或将两个无线网络连接起来。 D-Link DAP-1325 存在安全漏洞，该漏洞源于 HNAP SetAPLanSettings IPAddr 命令注入远程代码执行漏洞。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2023-41190の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2023-41190のインテリジェンス情報
请登录查看更多情报信息。
Same Patch Batch · D-Link · 2024-05-03 · 188 CVEs total
| CVE-2023-37310 | D-Link DAP-2622 DDP Set Device Info Auth Username Stack-based Buffer Overflow Remote Code | |
| CVE-2023-37322 | D-Link DAP-2622 DDP Set SSID List RADIUS Server Stack-based Buffer Overflow Remote Code Ex | |
| CVE-2023-37319 | D-Link DAP-2622 DDP Set IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vul | |
| CVE-2023-37315 | D-Link DAP-2622 DDP Set IPv6 Address Auth Password Stack-based Buffer Overflow Remote Code | |
| CVE-2023-37314 | D-Link DAP-2622 DDP Set IPv6 Address Auth Username Stack-based Buffer Overflow Remote Code | |
| CVE-2023-37313 | D-Link DAP-2622 DDP Set IPv4 Address Auth Username Stack-based Buffer Overflow Remote Code | |
| CVE-2023-37316 | D-Link DAP-2622 DDP Set IPv6 Address Default Gateway Stack-based Buffer Overflow Remote Co | |
| CVE-2023-37317 | D-Link DAP-2622 DDP Set IPv6 Address Primary DNS Stack-based Buffer Overflow Remote Code E | |
| CVE-2023-37318 | D-Link DAP-2622 DDP Set IPv6 Address Secondary DNS Stack-based Buffer Overflow Remote Code | |
| CVE-2023-37324 | D-Link DAP-2622 DDP Set Wireless Info Auth Username Stack-based Buffer Overflow Remote Cod | |
| CVE-2023-37323 | D-Link DAP-2622 DDP Set SSID List PSK Stack-based Buffer Overflow Remote Code Execution Vu | |
| CVE-2023-37312 | D-Link DAP-2622 DDP Set Device Info Device Name Stack-based Buffer Overflow Remote Code Ex | |
| CVE-2023-44426 | D-Link DIR-X3260 SetSysEmailSettings AccountPassword Command Injection Remote Code Executi | |
| CVE-2023-44421 | D-Link DIR-X3260 SetTriggerPPPoEValidate Username Command Injection Remote Code Execution | |
| CVE-2023-44409 | D-Link DAP-1325 SetSetupWizardStatus Enabled Stack-based Buffer Overflow Remote Code Execu | |
| CVE-2023-44422 | D-Link DIR-X3260 SetSysEmailSettings EmailFrom Command Injection Remote Code Execution Vul | |
| CVE-2023-44425 | D-Link DIR-X3260 SetSysEmailSettings AccountName Command Injection Remote Code Execution V | |
| CVE-2023-44420 | D-Link DIR-X3260 prog.cgi Incorrect Implementation of Authentication Algorithm Authenticat | |
| CVE-2023-37321 | D-Link DAP-2622 DDP Set SSID List RADIUS Secret Stack-based Buffer Overflow Remote Code Ex | |
| CVE-2023-37320 | D-Link DAP-2622 DDP Set SSID List SSID Name Stack-based Buffer Overflow Remote Code Execut |
Showing 20 of 188 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: DAP-1325
- CVE-2023-53896
D-Link DAP-1325 Hardware A1 Unauthenticated Configuration Do - CVE-2023-44409
D-Link DAP-1325 SetSetupWizardStatus Enabled Stack-based Buf - CVE-2023-44408
D-Link DAP-1325 SetAPLanSettings IPAddr Stack-based Buffer O - CVE-2023-44406
D-Link DAP-1325 SetAPLanSettings DeviceName Stack-based Buff - CVE-2023-44407
D-Link DAP-1325 SetAPLanSettings Gateway Stack-based Buffer
同じベンダー: D-Link
- CVE-2026-8273
D-Link DNS-320 system_mgr.cgi cgi_merge_user os command inje - CVE-2026-8272
D-Link DNS-320 webfile_mgr.cgi chown os command injection - CVE-2026-8271
D-Link DNS-320 network_mgr.cgi cgi_upnp_edit os command inje - CVE-2026-8260
D-Link DCS-935L HNAP Service hnap_service SetDeviceSettings - CVE-2026-7857
D-Link DI-8100 CGI user_group.asp sprintf buffer overflow
同じ弱点: CWE-78
- CVE-2026-8273
D-Link DNS-320 system_mgr.cgi cgi_merge_user os command inje - CVE-2026-8272
D-Link DNS-320 webfile_mgr.cgi chown os command injection - CVE-2026-8271
D-Link DNS-320 network_mgr.cgi cgi_upnp_edit os command inje - CVE-2026-8265
Tenda AC6 httpd getLogFile get_log_file os command injection - CVE-2026-8264
Tenda AC6 httpd WifiApScan formWifiApScan os command injecti
V. CVE-2023-41190へのコメント
まだコメントはありません