High · 8.8 CVE-2022-42160 EUVD-2022-45237GHSA-784c-xcf7-3mm9

D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the system_time_timezone parameter at func…

Published Oct 13, 2022 · Updated May 16, 2025 · Assigned by mitre

Description

D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the system_time_timezone parameter at function SetNTPServerSettings.

References

https://www.dlink.com/en/security-bulletin/
https://github.com/14isnot40/vul_discovery/blob/master/D-Link%20COVR%2012xx%20.pdf