CVE-2022-42999 - D-Link DIR-816 A2 1.10 B05 was discovered to contain multiple command injection vulnerabilities via the admuser and admpass parameters at /goform/setSysAdm

Back Back to CVE browser

HIGH

D-Link DIR-816 A2 1.10 B05 was discovered to contain multiple command injection vulnerabilities via the admuser and admpass parameters at /goform/setSysAdm

Published Oct 26, 2022

7.5

HIGH

CVSS 3.1

EPSS 2.74%

Description

D-Link DIR-816 A2 1.10 B05 was discovered to contain multiple command injection vulnerabilities via the admuser and admpass parameters at /goform/setSysAdm.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-46048
Advisory
https://github.com/hunzi0/VulInfo/tree/main/D-Link/DIR-816/setSysAdm
ExploitThird Party Advisory
https://www.dlink.com/en/security-bulletin/
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-46048		Advisory
https://github.com/hunzi0/VulInfo/tree/main/D-Link/DIR-816/setSysAdm		ExploitThird Party Advisory
https://www.dlink.com/en/security-bulletin/		Vendor Advisory