High WID-SEC-2022-2380 6 CVEs

D-LINK DIR-825: Mehrere Schwachstellen ermöglichen Command Injection

Published Dec 20, 2022 · Updated Dec 28, 2022 · Revision 2 · de-DE

Vendor: D-Link Product: Router DIR-825 < 1.0.10 Beta Hotfix

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen im D-LINK Router DIR-825 ausnutzen, um beliebige Kommandos auszuführen.

Product

Router der Firma D-LINK enthalten eine Firewall und in der Regel eine WLAN-Schnittstelle. Die Geräte sind hauptsächlich für private Anwender und Kleinunternehmen konzipiert.

Vulnerabilities 6

High 8.8

CVE-2022-43642

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-…

D-Link DIR-825 Network devices

Mar 29, 2023
High 8.8

CVE-2022-43643

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-…

D-Link DIR-825 Network devices

Mar 29, 2023
High 8.8

CVE-2022-43644

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-…

D-Link DIR-825 Network devices

Mar 29, 2023
High 8.8

CVE-2022-43645

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-…

D-Link DIR-825 Network devices

Mar 29, 2023
High 8.8

CVE-2022-43646

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-…

D-Link DIR-825 Network devices

Mar 29, 2023
High 8.8

CVE-2022-43647

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-…

D-Link DIR-825 Network devices

Mar 29, 2023

Revision history

2022-12-28 #2
CVE Nummern ergänzt
2022-12-20 #1
Initiale Fassung

References

D-Link Support Announcement SAP10319 vom 2022-12-20
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10319