Dir 882 Firmware

CVEs (32)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-44807	Dlink Dir 882 Firmware	Cri	0.64	9.8	0.01	Nov 22, 2022	D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow via webGetVarString.
CVE-2022-44806	Dlink Dir 882 Firmware	Cri	0.64	9.8	0.01	Nov 22, 2022	D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow.
CVE-2022-44804	Dlink Dir 882 Firmware	Cri	0.64	9.8	0.01	Nov 22, 2022	D-Link DIR-882 1.10B02 and1.20B06 is vulnerable to Buffer Overflow via the websRedirect function.
CVE-2022-28901	Dlink DIR882	Cri	0.64	9.8	0.04	May 10, 2022	A command injection vulnerability in the component /SetTriggerLEDBlink/Blink of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privileges to root via a crafted payload.
CVE-2022-28896	Dlink DIR882	Cri	0.64	9.8	0.04	May 10, 2022	A command injection vulnerability in the component /setnetworksettings/SubnetMask of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privileges to root via a crafted payload.
CVE-2022-28895	Dlink DIR882	Cri	0.64	9.8	0.04	May 10, 2022	A command injection vulnerability in the component /setnetworksettings/IPAddress of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privileges to root via a crafted payload.
CVE-2022-28571	Dlink DIR882A1	Cri	0.64	9.8	0.06	May 2, 2022	D-link 882 DIR882A1_FW130B06 was discovered to contain a command injection vulnerability in`/usr/bin/cli.
CVE-2021-45998	Dlink Dir 882 Firmware	Cri	0.64	9.8	0.04	Feb 4, 2022	D-Link device DIR_882 DIR_882_FW1.30B06_Hotfix_02 was discovered to contain a command injection vulnerability in the LocalIPAddress parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted HNAP1 POST request.
CVE-2021-44881	Dlink Dir 882 Firmware	Cri	0.64	9.8	0.05	Feb 4, 2022	D-Link device DIR_882 DIR_882_FW1.30B06_Hotfix_02 was discovered to contain a command injection vulnerability in the twsystem function. This vulnerability allows attackers to execute arbitrary commands via a crafted HNAP1 POST request.
CVE-2021-44880	Dlink Dir 882 Firmware	Cri	0.64	9.8	0.04	Feb 4, 2022	D-Link devices DIR_878 DIR_878_FW1.30B08_Hotfix_02 and DIR_882 DIR_882_FW1.30B06_Hotfix_02 were discovered to contain a command injection vulnerability in the system function. This vulnerability allows attackers to execute arbitrary commands via a crafted HNAP1 POST request.
CVE-2020-8864	Dlink DIR-867	Hig	0.64	8.8	0.80	Mar 23, 2020	This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04. Authentication is not required to exploit this vulnerability. The specific flaw exists within the…
CVE-2020-8863	Dlink DIR-867	Hig	0.63	8.8	0.77	Mar 23, 2020	This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04. Authentication is not required to exploit this vulnerability. The specific flaw exists within the…
CVE-2023-24330	Dlink DIR882	Hig	0.57	8.8	0.01	Feb 21, 2024	Command Injection vulnerability in D-Link Dir 882 with firmware version DIR882A1_FW130B06 allows attackers to run arbitrary commands via crafted POST request to /HNAP1/.
CVE-2020-15633	Dlink DIR-867	Hig	0.57	8.8	0.03	Jul 23, 2020	This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.20B10_BETA. Authentication is not required to exploit this vulnerability. The specific flaw exists within the…
CVE-2024-48634	Dlink Dir 882 Firmware	Hig	0.53	8.0	0.17	Oct 17, 2024	D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the key parameter in the SetWLanRadioSecurity function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request.
CVE-2024-48638	Dlink Dir 882 Firmware	Hig	0.52	8.0	0.02	Oct 17, 2024	D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the SubnetMask parameter in the SetGuestZoneRouterSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST…
CVE-2024-48637	Dlink Dir 882 Firmware	Hig	0.52	8.0	0.02	Oct 17, 2024	D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the VLANID:1/VID parameter in the SetVLANSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request.
CVE-2024-48636	Dlink Dir 882 Firmware	Hig	0.52	8.0	0.02	Oct 17, 2024	D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the VLANID:0/VID parameter in the SetVLANSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request.
CVE-2024-48635	Dlink Dir 882 Firmware	Hig	0.52	8.0	0.02	Oct 17, 2024	D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the VLANID:2/VID parameter in the SetVLANSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request.
CVE-2024-48633	Dlink Dir 882 Firmware	Hig	0.52	8.0	0.02	Oct 17, 2024	D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain multiple command injection vulnerabilities via the ExternalPort, InternalPort, ProtocolNumber, and LocalIPAddress parameters in the SetVirtualServerSettings function. This vulnerability allows…

CVE-2022-44807CriNov 22, 2022
Dlink
Dir 882 Firmware
risk 0.64cvss 9.8epss 0.01
D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow via webGetVarString.
CVE-2022-44806CriNov 22, 2022
Dlink
Dir 882 Firmware
risk 0.64cvss 9.8epss 0.01
D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow.
CVE-2022-44804CriNov 22, 2022
Dlink
Dir 882 Firmware
risk 0.64cvss 9.8epss 0.01
D-Link DIR-882 1.10B02 and1.20B06 is vulnerable to Buffer Overflow via the websRedirect function.
CVE-2022-28901CriMay 10, 2022
Dlink
DIR882
risk 0.64cvss 9.8epss 0.04
A command injection vulnerability in the component /SetTriggerLEDBlink/Blink of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privileges to root via a crafted payload.
CVE-2022-28896CriMay 10, 2022
Dlink
DIR882
risk 0.64cvss 9.8epss 0.04
A command injection vulnerability in the component /setnetworksettings/SubnetMask of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privileges to root via a crafted payload.
CVE-2022-28895CriMay 10, 2022
Dlink
DIR882
risk 0.64cvss 9.8epss 0.04
A command injection vulnerability in the component /setnetworksettings/IPAddress of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privileges to root via a crafted payload.
CVE-2022-28571CriMay 2, 2022
Dlink
DIR882A1
risk 0.64cvss 9.8epss 0.06
D-link 882 DIR882A1_FW130B06 was discovered to contain a command injection vulnerability in`/usr/bin/cli.
CVE-2021-45998CriFeb 4, 2022
Dlink
Dir 882 Firmware
risk 0.64cvss 9.8epss 0.04
D-Link device DIR_882 DIR_882_FW1.30B06_Hotfix_02 was discovered to contain a command injection vulnerability in the LocalIPAddress parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted HNAP1 POST request.
CVE-2021-44881CriFeb 4, 2022
Dlink
Dir 882 Firmware
risk 0.64cvss 9.8epss 0.05
D-Link device DIR_882 DIR_882_FW1.30B06_Hotfix_02 was discovered to contain a command injection vulnerability in the twsystem function. This vulnerability allows attackers to execute arbitrary commands via a crafted HNAP1 POST request.
CVE-2021-44880CriFeb 4, 2022
Dlink
Dir 882 Firmware
risk 0.64cvss 9.8epss 0.04
D-Link devices DIR_878 DIR_878_FW1.30B08_Hotfix_02 and DIR_882 DIR_882_FW1.30B06_Hotfix_02 were discovered to contain a command injection vulnerability in the system function. This vulnerability allows attackers to execute arbitrary commands via a crafted HNAP1 POST request.
CVE-2020-8864HigMar 23, 2020
Dlink
DIR-867
risk 0.64cvss 8.8epss 0.80
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04. Authentication is not required to exploit this vulnerability. The specific flaw exists within the…
CVE-2020-8863HigMar 23, 2020
Dlink
DIR-867
risk 0.63cvss 8.8epss 0.77
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04. Authentication is not required to exploit this vulnerability. The specific flaw exists within the…
CVE-2023-24330HigFeb 21, 2024
Dlink
DIR882
risk 0.57cvss 8.8epss 0.01
Command Injection vulnerability in D-Link Dir 882 with firmware version DIR882A1_FW130B06 allows attackers to run arbitrary commands via crafted POST request to /HNAP1/.
CVE-2020-15633HigJul 23, 2020
Dlink
DIR-867
risk 0.57cvss 8.8epss 0.03
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.20B10_BETA. Authentication is not required to exploit this vulnerability. The specific flaw exists within the…
CVE-2024-48634HigOct 17, 2024
Dlink
Dir 882 Firmware
risk 0.53cvss 8.0epss 0.17
D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the key parameter in the SetWLanRadioSecurity function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request.
CVE-2024-48638HigOct 17, 2024
Dlink
Dir 882 Firmware
risk 0.52cvss 8.0epss 0.02
D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the SubnetMask parameter in the SetGuestZoneRouterSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST…
CVE-2024-48637HigOct 17, 2024
Dlink
Dir 882 Firmware
risk 0.52cvss 8.0epss 0.02
D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the VLANID:1/VID parameter in the SetVLANSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request.
CVE-2024-48636HigOct 17, 2024
Dlink
Dir 882 Firmware
risk 0.52cvss 8.0epss 0.02
D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the VLANID:0/VID parameter in the SetVLANSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request.
CVE-2024-48635HigOct 17, 2024
Dlink
Dir 882 Firmware
risk 0.52cvss 8.0epss 0.02
D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the VLANID:2/VID parameter in the SetVLANSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request.
CVE-2024-48633HigOct 17, 2024
Dlink
Dir 882 Firmware
risk 0.52cvss 8.0epss 0.02
D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain multiple command injection vulnerabilities via the ExternalPort, InternalPort, ProtocolNumber, and LocalIPAddress parameters in the SetVirtualServerSettings function. This vulnerability allows…

Page 1 of 2