Lucene search
China National Vulnerability DatabaseCNVD-2023-28115HistoryDec 20, 2022 - 12:00 a.m.
D-Link DIR-3040 Command Injection Vulnerability
2022-12-2000:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
d-link
dir-3040
router
china youxun
network
command injection
vulnerability
settriggerledblink
improper filtering
arbitrary command execution
cnvd
0.002 Low
EPSS
Percentile
59.7%
D-Link DIR-3040 is a router from China Youxun (D-Link). It provides the function of connecting to the network. D-Link DIR-3040 has a command injection vulnerability, which stems from the SetTriggerLEDBlink function fails to properly filter the construct command special characters, commands, etc. An attacker can use this vulnerability to cause arbitrary command execution.
Related
cve
cve
CVE-2022-44832
2022-12-14 15:15:10
nvd
nvd
CVE-2022-44832
2022-12-14 15:15:10
cvelist
cvelist
CVE-2022-44832
2022-12-14 00:00:00
prion
prion
Command injection
2022-12-14 15:15:00