Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-53896 1 Dlink 2 Dap-1325, Dap-1325 Firmware 2026-04-07 7.5 High
D-Link DAP-1325 firmware version 1.01 contains a broken access control vulnerability that allows unauthenticated attackers to download device configuration settings without authentication. Attackers can exploit the /cgi-bin/ExportSettings.sh endpoint to retrieve sensitive configuration information by directly accessing the export settings script.