CVE-2022-44201

Vulnerability

A command injection vulnerability exists in the D-Link DIR823G router running firmware version 1.02B05 [1]. The specific affected component or input parameter is not disclosed in available references, but the vulnerability allows injection of arbitrary commands through the device's web interface or other network-accessible services [1].

Exploitation

According to the advisory, D-Link does not release detailed exploitation information that could enable crafting an exploit [1]. Attackers would likely need network access to the router's management interface; the exact prerequisites (e.g., authentication, user interaction) are not specified in public sources [1].

Impact

Successful exploitation permits an attacker to execute arbitrary operating system commands on the router. This can lead to full compromise of the device, including unauthorized access to network traffic, modification of device configuration, or use as a pivot for further attacks on the local network [1].

Mitigation

No fixed firmware version or workaround has been released by D-Link as of the publication date [1]. Users should monitor the D-Link security bulletin page for updates [1]. The product may be at end-of-life (EOL); D-Link's EOL policy should be checked [1].