CVE-2022-32092 - D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the QUERY_STRING parameter at __ajax_explorer.sgi

CRITICAL

D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the QUERY_STRING parameter at __ajax_explorer.sgi

Published Jun 27, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 5.80%

D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the QUERY_STRING parameter at __ajax_explorer.sgi.

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-53360		Advisory
https://github.com/fxc233/iot-vul/tree/main/D-Link/DIR-645		x_refsource_MISCExploitThird Party Advisory
https://www.dlink.com/en/security-bulletin/		x_refsource_MISCVendor Advisory