Actively exploited · Published Mar 27, 2022 · Assigned by mitre
CVE-2022-26258
Critical 9.8 Exploited
In plain English
A critical-severity OS command injection in DIR-820L from D-Link. Attackers are actively exploiting it in the wild (listed by CISA on September 8, 2022). The chance it is exploited in the next 30 days is estimated at 91.6% (higher than 99.8% of all known vulnerabilities). The impacted product is end-of-life and should be disconnected if still in use.
CISA guidance
The impacted product is end-of-life and should be disconnected if still in use.
Federal agencies must remediate by Sep 29, 2022.
Official description
D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.
Affected products (as reported)
Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://www.dlink.com/en/security-bulletin/
- https://github.com/skyedai910/Vuln/tree/master/DIR-820L/command_execution_0
- https://github.com/zhizhuoshuma/cve_info_data/blob/ccaed4b94ba762eb8a8e003bfa762a7754b8182e/Vuln/Vuln/DIR-820L/command_execution_0/README.md
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-26258 government-resource