CVE-2023-53896 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

D-Link DAP-1325 firmware version 1.01 contains a broken access control vulnerability that allows unauthenticated attackers to download device configuration sett…
High CVSS: 8.7

CVE-2023-53896

D-Link DAP-1325 firmware version 1.01 contains a broken access control vulnerability that allows unauthenticated attackers to download device configuration settings without authentication. Attackers can exploit the /cgi-bin/ExportSettings.sh endpoint to retrieve sensitive configuration information by directly accessing the export settings script.
Vendor
Dlink
Product
Dap-1325 Firmware
CWE
CWE-306
Yayın Tarihi
2025-12-16 18:16:06
Güncelleme
2025-12-24 17:15:32
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

Referanslar