Critical severity9.8NVD Advisory· Published Aug 31, 2022· Updated Jun 17, 2026

CVE-2022-37130

Description

In D-Link DIR-816 A2_v1.10CNB04, DIR-878 DIR_878_FW1.30B08.img a command injection vulnerability occurs in /goform/Diagnosis, after the condition is met, setnum will be spliced into v10 by snprintf, and the system will be executed, resulting in a command injection vulnerability

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dlink/Dir 816 Firmware
cpe:2.3:o:dlink:dir-816_firmware:1.10cnb04:*:*:*:*:*:*:*
Dlink/DIR-816cpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: A2_v1.10CNB04
Dlink/DIR878llm-create
Range: FW1.30B08

Patches

Vulnerability mechanics

References

github.com/z1r00/IOT_Vul/blob/main/dlink/Dir816/Diagnosis/readme.mdnvdExploitThird Party Advisory
www.dlink.com/en/security-bulletin/nvdVendor Advisory
github.com/726232111/VulIoT/tree/main/D-Link/DIR-816%20A2_v1.10CNB05/Diagnosisnvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.022
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000