CVE-2023-37325

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-37325
D-Link DAP-2622 DDP Set SSID List Missing Authentication Vulnerability. This vulnerability allows network-adjacent attackers to make unauthorized changes to device configuration on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to manipulate wireless authentication settings. . Was ZDI-CAN-20104.
CVSS

No CVSS.

References
Link Resource
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10349 Vendor Advisory Product
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10349 Vendor Advisory Product
https://www.zerodayinitiative.com/advisories/ZDI-23-1280/ Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-23-1280/ Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dlink:dap-2622_firmware:1.00:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dap-2622:-:*:*:*:*:*:*:*
History

06 Aug 2025, 14:14

Type Values Removed Values Added
References () https://www.zerodayinitiative.com/advisories/ZDI-23-1280/ - () https://www.zerodayinitiative.com/advisories/ZDI-23-1280/ - Third Party Advisory
References () https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10349 - () https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10349 - Vendor Advisory, Product
CPE cpe:2.3:h:dlink:dap-2622:-:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dap-2622_firmware:1.00:*:*:*:*:*:*:*
First Time Dlink
Dlink dap-2622 Firmware
Dlink dap-2622

18 Sep 2024, 19:15

Type Values Removed Values Added
Summary D-Link DAP-2622 DDP Set SSID List Missing Authentication Vulnerability. This vulnerability allows network-adjacent attackers to make unauthorized changes to device configuration on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to manipulate wireless authentication settings. Was ZDI-CAN-20104. D-Link DAP-2622 DDP Set SSID List Missing Authentication Vulnerability. This vulnerability allows network-adjacent attackers to make unauthorized changes to device configuration on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to manipulate wireless authentication settings. . Was ZDI-CAN-20104.

07 May 2024, 23:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-07 23:15

Updated : 2025-08-06 14:14

NVD link : CVE-2023-37325

Mitre link : CVE-2023-37325

JSON object : View

Products Affected

dlink

  • dap-2622_firmware
  • dap-2622
CWE

No CWE.