Approved changes feed: RSS · Atom
cpe:2.3:h:dlink:dap-1325:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Dlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44) |
|---|---|
| Product | Dap 1325 (89692ec3-723a-5d39-80ac-a0a9d1230c9b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-53896 |
not_vulnerable | 2026-06-08 06:19:39.958344 |
D-Link DAP-1325 Hardware A1 Unauthenticated Configuration Download
HIGH (7.5)
D-Link DAP-1325 firmware version 1.01 contains a broken access control vulnerability that allows unauthenticated attackers to download device configuration settings without authentication. Attackers can exploit the /cgi-bin/ExportSettings.sh endpoint to retrieve sensitive configuration information by directly accessing the export settings script.
Published: 2025-12-16T17:06:19.762Z
Updated: 2026-04-07T14:07:20.166Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41186 |
not_vulnerable | 2026-06-08 06:11:05.516742 |
D-Link DAP-1325 CGI Missing Authentication Information Disclosure Vulnerability
MEDIUM (6.5)
D-Link DAP-1325 CGI Missing Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to access various functionality on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the implementation of the CGI interface. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-18804.
Published: 2024-05-03T02:11:46.996Z
Updated: 2024-08-02T18:54:04.177Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.