High · 8.8 CVE-2022-42161 EUVD-2022-45238GHSA-7x4q-86g3-3vwp

D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the /SetTriggerWPS/PIN parameter at functi…

Published Oct 13, 2022 · Updated May 15, 2025 · Assigned by mitre

Description

D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the /SetTriggerWPS/PIN parameter at function SetTriggerWPS.

References

https://www.dlink.com/en/security-bulletin/
https://github.com/14isnot40/vul_discovery/blob/master/D-Link%20COVR%2012xx%20.pdf