Dlink

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-42161 1Dlink 3Covr 1200 Firmware Covr 1202 FirmwareCovr 1203 Firmware Jun 17, 2026 Oct 13, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the /SetTriggerWPS/PIN parameter at function SetTriggerWPS.
CVE-2022-42160 1Dlink 3Covr 1200 Firmware Covr 1202 FirmwareCovr 1203 Firmware Jun 17, 2026 Oct 13, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the system_time_timezone parameter at function SetNTPServerSettings.
CVE-2022-42159 1Dlink 3Covr 1200 Firmware Covr 1202 FirmwareCovr 1203 Firmware Jun 17, 2026 Oct 13, 2022 N/A· v4 4.3 MEDIUM· v3 N/A· v2 D-Link COVR 1200,1202,1203 v1.08 was discovered to have a predictable seed in a Pseudo-Random Number Generator.
CVE-2022-42156 1Dlink 3Covr 1200 Firmware Covr 1202 FirmwareCovr 1203 Firmware Jun 17, 2026 Oct 13, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 D-Link COVR 1200,1203 v1.08 was discovered to contain a command injection vulnerability via the tomography_ping_number parameter at function SetNetworkTomographySettings.
CVE-2022-38258 1Dlink 1Dir 819 Firmware Jun 17, 2026 Sep 8, 2022 N/A· v4 8.1 HIGH· v3 N/A· v2 A local file inclusion (LFI) vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service (DoS) or access sensitive server information via manipulation of the getpage parameter in a crafted web req...Show more A local file inclusion (LFI) vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service (DoS) or access sensitive server information via manipulation of the getpage parameter in a crafted web request.Show less
CVE-2022-36588 1Dlink 1Dap 1650 Firmware Jun 17, 2026 Sep 8, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 In D-Link DAP1650 v1.04 firmware, the fileaccess.cgi program in the firmware has a buffer overflow vulnerability caused by strncpy.
CVE-2022-31414 1Dlink 1Dir 1960 Firmware Jun 17, 2026 Sep 7, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 D-Link DIR-1960 firmware DIR-1960_A1_1.11 was discovered to contain a buffer overflow via srtcat in prog.cgi. This vulnerability allowed attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
CVE-2022-37130 1Dlink 1Dir 816 Firmware Jun 17, 2026 Aug 31, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 In D-Link DIR-816 A2_v1.10CNB04, DIR-878 DIR_878_FW1.30B08.img a command injection vulnerability occurs in /goform/Diagnosis, after the condition is met, setnum will be spliced into v10 by snprintf, and the system will b...Show more In D-Link DIR-816 A2_v1.10CNB04, DIR-878 DIR_878_FW1.30B08.img a command injection vulnerability occurs in /goform/Diagnosis, after the condition is met, setnum will be spliced into v10 by snprintf, and the system will be executed, resulting in a command injection vulnerabilityShow less
CVE-2022-37129 1Dlink 1Dir 816 Firmware Jun 17, 2026 Aug 31, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 D-Link DIR-816 A2_v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand. After the user passes in the command parameter, it will be spliced into byte_4836B0 by snprintf, and finally doSystem(&byte_4...Show more D-Link DIR-816 A2_v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand. After the user passes in the command parameter, it will be spliced into byte_4836B0 by snprintf, and finally doSystem(&byte_4836B0); will be executed, resulting in a command injection.Show less
CVE-2022-37123 1Dlink 1Dir 816 Firmware Jun 17, 2026 Aug 31, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Command injection via /goform/form2userconfig.cgi.
CVE-2022-36619 1Dlink 1Dir 816 Firmware Jun 17, 2026 Aug 31, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 In D-link DIR-816 A2_v1.10CNB04.img,the network can be reset without authentication via /goform/setMAC.
CVE-2022-37125 1Dlink 1Dir 816 Firmware Jun 17, 2026 Aug 31, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost.
CVE-2022-36620 1Dlink 1Dir 816 Firmware Jun 17, 2026 Aug 31, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 D-link DIR-816 A2_v1.10CNB04, DIR-878 DIR_878_FW1.30B08.img is vulnerable to Buffer Overflow via /goform/addRouting.
CVE-2022-37128 1Dlink 1Dir 816 Firmware Jun 17, 2026 Aug 31, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 In D-Link DIR-816 A2_v1.10CNB04.img the network can be initialized without authentication via /goform/wizard_end.
CVE-2022-37056 1Dlink 1Go Rt Ac750 Firmware Jun 17, 2026 Aug 28, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 D-Link GO-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 is vulnerable to Command Injection via /cgibin, hnap_main,
CVE-2022-37055 1Dlink 1Go Rt Ac750 Firmware Jun 17, 2026 Aug 28, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, hnap_main,
CVE-2022-38557 1Dlink 1Dir 845l Firmware Jun 17, 2026 Aug 28, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 D-Link DIR845L v1.00-v1.03 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh.
CVE-2022-37057 1Dlink 1Go Rt Ac750 Firmware Jun 17, 2026 Aug 28, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Command Injection via cgibin, ssdpcgi_main.
CVE-2022-36756 1Dlink 1Dir 845l Firmware Jun 17, 2026 Aug 28, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 DIR845L A1 v1.00-v1.03 is vulnerable to command injection via /htdocs/upnpinc/gena.php.
CVE-2022-36755 1Dlink 1Dir 845l Firmware Jun 17, 2026 Aug 28, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 D-Link DIR845L A1 contains a authentication vulnerability via an AUTHORIZED_GROUP=1 value, as demonstrated by a request for getcfg.php.

Previous 1...585960...86 Next