High severity · published Dec 16, 2025
CVE-2023-53896
D-Link DAP-1325 Hardware A1 Unauthenticated Configuration Download
7.5
CVSS
0.7%
EPSS
No
On KEV
Description
D-Link DAP-1325 firmware version 1.01 contains a broken access control vulnerability that allows unauthenticated attackers to download device configuration settings without authentication. Attackers can exploit the /cgi-bin/ExportSettings.sh endpoint to retrieve sensitive configuration information by directly accessing the export settings script.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 54% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DA
DAP-1325 · D-Link
1.01 · source: vendor
DF
Dap-1325 Firmware · Dlink
1.01 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-53896
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-53896
Product
https://www.dlink.com/hr/hr/products/dap-1325-n300-wifi-range-extender
Exploit
https://www.exploit-db.com/exploits/51556
Broken Link
https://www.vulncheck.com/advisories/d-link-dap-hardware-a-unauthenticated-configuration-download
More from DAP-1325
8.8
CVE-2023-44409
D-Link DAP-1325 SetSetupWizardStatus Enabled Stack-based Buffer Overflow Remote Code Execution Vulnerability
8.8
CVE-2023-44408
D-Link DAP-1325 SetAPLanSettings IPAddr Stack-based Buffer Overflow Remote Code Execution Vulnerability
8.8
CVE-2023-44407
D-Link DAP-1325 SetAPLanSettings Gateway Stack-based Buffer Overflow Remote Code Execution Vulnerability
8.8
CVE-2023-44406
D-Link DAP-1325 SetAPLanSettings DeviceName Stack-based Buffer Overflow Remote Code Execution Vulnerability
8.8
CVE-2023-44405
D-Link DAP-1325 get_value_of_key Stack-based Buffer Overflow Remote Code Execution Vulnerability