D-Link Dap-1325 Firmware vulnerabilities

37 CVEs affecting D-Link Dap-1325 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-53896, published 2025-12-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-41201, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. D-Link DAP-1325 HNAP SetSetupWizardStatus Enabled Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-41200, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticPrefixLength Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code…
CVE-2023-41199, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticDNS2 Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on…
CVE-2023-41198, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticDNS1 Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on…
CVE-2023-41197, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticDefaultGateway Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary…
CVE-2023-41196, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticAddress Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on…
CVE-2023-41195, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. D-Link DAP-1325 HNAP SetHostIPv6Settings IPv6Mode Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-41194, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. D-Link DAP-1325 HNAP SetAPLanSettings SubnetMask Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-41193, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. D-Link DAP-1325 HNAP SetAPLanSettings SecondaryDNS Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-41192, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. D-Link DAP-1325 HNAP SetAPLanSettings PrimaryDNS Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…

Latest

CVE-2023-53896, published 2025-12-16. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. D-Link DAP-1325 firmware version 1.01 contains a broken access control vulnerability that allows unauthenticated attackers to download device configuration settings without authentication. Attackers…
CVE-2023-44409, published 2024-05-03. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. D-Link DAP-1325 SetSetupWizardStatus Enabled Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on…
CVE-2023-44408, published 2024-05-03. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. D-Link DAP-1325 SetAPLanSettings IPAddr Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-44407, published 2024-05-03. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. D-Link DAP-1325 SetAPLanSettings Gateway Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-44406, published 2024-05-03. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. D-Link DAP-1325 SetAPLanSettings DeviceName Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-44405, published 2024-05-03. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. D-Link DAP-1325 get_value_of_key Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-44404, published 2024-05-03. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. D-Link DAP-1325 get_value_from_app Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-44403, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. D-Link DAP-1325 HNAP SetWLanRadioSettings Channel Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-41214, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. D-Link DAP-1325 setDhcpAssignRangeUpdate lan_ipaddr Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on…
CVE-2023-41213, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. D-Link DAP-1325 setDhcpAssignRangeUpdate lan_ipaddr Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on…