Critical · 9.8 CVE-2022-48107 EUVD-2022-50821GHSA-w49p-h6v2-88hr

D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability via the component /setnetworksettings/IPAddress. This …

Published Jan 27, 2023 · Updated Mar 28, 2025 · Assigned by mitre

Description

D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability via the component /setnetworksettings/IPAddress. This vulnerability allows attackers to escalate privileges to root via a crafted payload.

Advisories 1

WID-SEC-2023-0215 D-LINK Router: Mehrere Schwachstellen ermöglichen Privilegieneskalation BSI CERT-Bund (WID) · Jan 29, 2023

References

https://www.dlink.com/en/security-bulletin/
https://github.com/migraine-sudo/D_Link_Vuln/tree/main/cmd%20inject%20in%20IPAddress