Lucene search

[email protected]CVE-2022-38258

HistorySep 08, 2022 - 6:15 p.m.

CVE-2022-38258

2022-09-0818:15:08

CWE-22

[email protected]

web.nvd.nist.gov

cve-2022-38258

local file inclusion

lfi

d-link dir 819

denial of service

dos

sensitive server information

web request manipulation

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.4%

JSON

A local file inclusion (LFI) vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service (DoS) or access sensitive server information via manipulation of the getpage parameter in a crafted web request.

Affected configurations

NVD

Node

dlinkdir-819_firmwareMatch1.06

AND

dlinkdir-819Match-

CPENameOperatorVersion
dlink:dir-819_firmwaredlink dir-819 firmwareeq1.06

CPE	Name	Operator	Version
dlink:dir-819_firmware	dlink dir-819 firmware	eq	1.06

References

whokilleddb.github.io/blogs/posts/dlink_dir-819_lfi_and_dos/

www.dlink.com/en/security-bulletin/

Social References

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.4%

JSON

Related for CVE-2022-38258

prion1 cvelist1 nvd1