CVE-2022-46476 - D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgi_main function

CRITICAL

D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgi_main function

Published Jan 19, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 41.05%

D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgi_main function.

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-49280		Advisory
https://github.com/Insight8991/iot/blob/main/dir859%20Command%20Execution%20Vulnerability.md		ExploitThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jan 19, 2023

Updated Apr 3, 2025

Reserved Dec 5, 2022

Updated Apr 3, 2025

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Jan 19, 2023

Updated Apr 3, 2025

Exploited since n/a