Critical · 9.8 CVE-2022-48108 EUVD-2022-50822GHSA-4g2v-j3c9-cqx4

D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability via the component /SetNetworkSettings/SubnetMask. This…

Published Jan 27, 2023 · Updated Mar 28, 2025 · Assigned by mitre

Description

D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability via the component /SetNetworkSettings/SubnetMask. This vulnerability allows attackers to escalate privileges to root via a crafted payload.

Advisories 1

WID-SEC-2023-0215 D-LINK Router: Mehrere Schwachstellen ermöglichen Privilegieneskalation BSI CERT-Bund (WID) · Jan 29, 2023

References

https://www.dlink.com/en/security-bulletin/
https://github.com/migraine-sudo/D_Link_Vuln/tree/main/cmd%20inject%20in%20Netmask