CVE-2023-53896
D-Link DAP-1325 firmware version 1.01 contains a broken access control vulnerability that allows unauthenticated attackers to download device configuration settings without authentication. Attackers can exploit the /cgi-bin/ExportSettings.sh endpoint to retrieve sensitive configuration information by directly accessing the export settings script.
Vendor
Product
CWE
Yayın Tarihi
2025-12-16 18:16:06
Güncelleme
2025-12-24 17:15:32
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-