CVE-2022-44832 - D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function

CRITICAL

D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function

Published Dec 14, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 3.99%

D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function.

No remediation recorded yet.

Weaknesses (1)

CWE-77

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-47763		Advisory
https://github.com/flamingo1616/iot_vuln/blob/main/D-Link/DIR-3040/6.md		ExploitThird Party Advisory
https://www.dlink.com/en/security-bulletin/		Vendor Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 14, 2022

Updated Apr 22, 2025

Reserved Nov 7, 2022

CISA Vulnrichment

Updated Apr 22, 2025

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Dec 14, 2022

Updated Apr 22, 2025

GitHub

No data