Dlink

Dir-882 Firmware

31 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2022-44804

Exploit
  • EPSS 0.69%
  • Veröffentlicht 22.11.2022 15:15:13
  • Zuletzt bearbeitet 29.04.2025 20:15:24

D-Link DIR-882 1.10B02 and1.20B06 is vulnerable to Buffer Overflow via the websRedirect function.

10

CVE-2022-28901

Exploit
  • EPSS 33.43%
  • Veröffentlicht 10.05.2022 14:15:08
  • Zuletzt bearbeitet 21.11.2024 06:58:09

A command injection vulnerability in the component /SetTriggerLEDBlink/Blink of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privileges to root via a crafted payload.

10

CVE-2022-28896

Exploit
  • EPSS 33.43%
  • Veröffentlicht 10.05.2022 14:15:08
  • Zuletzt bearbeitet 21.11.2024 06:58:09

A command injection vulnerability in the component /setnetworksettings/SubnetMask of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privileges to root via a crafted payload.

10

CVE-2022-28895

Exploit
  • EPSS 33.43%
  • Veröffentlicht 10.05.2022 14:15:08
  • Zuletzt bearbeitet 21.11.2024 06:58:09

A command injection vulnerability in the component /setnetworksettings/IPAddress of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privileges to root via a crafted payload.

9.8

CVE-2022-28571

Exploit
  • EPSS 17.37%
  • Veröffentlicht 02.05.2022 13:15:08
  • Zuletzt bearbeitet 21.11.2024 06:57:31

D-link 882 DIR882A1_FW130B06 was discovered to contain a command injection vulnerability in`/usr/bin/cli.

7.8

CVE-2022-1262

Exploit
  • EPSS 1.16%
  • Veröffentlicht 11.04.2022 20:15:18
  • Zuletzt bearbeitet 21.11.2024 06:40:21

A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary commands as root.

9.8

CVE-2021-45998

  • EPSS 5.77%
  • Veröffentlicht 04.02.2022 02:15:09
  • Zuletzt bearbeitet 21.11.2024 06:33:27

D-Link device DIR_882 DIR_882_FW1.30B06_Hotfix_02 was discovered to contain a command injection vulnerability in the LocalIPAddress parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted HNAP1 POST request.

10

CVE-2021-44881

  • EPSS 8.9%
  • Veröffentlicht 04.02.2022 02:15:07
  • Zuletzt bearbeitet 21.11.2024 06:31:39

D-Link device DIR_882 DIR_882_FW1.30B06_Hotfix_02 was discovered to contain a command injection vulnerability in the twsystem function. This vulnerability allows attackers to execute arbitrary commands via a crafted HNAP1 POST request.

10

CVE-2021-44880

  • EPSS 17.07%
  • Veröffentlicht 04.02.2022 02:15:07
  • Zuletzt bearbeitet 21.11.2024 06:31:39

D-Link devices DIR_878 DIR_878_FW1.30B08_Hotfix_02 and DIR_882 DIR_882_FW1.30B06_Hotfix_02 were discovered to contain a command injection vulnerability in the system function. This vulnerability allows attackers to execute arbitrary commands via a cr...

8.8

CVE-2020-8863

  • EPSS 1.77%
  • Veröffentlicht 23.03.2020 21:15:12
  • Zuletzt bearbeitet 21.11.2024 05:39:35

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04. Authentication is not required to exploit this vulnerability. The specific ...