Lucene search
HistoryOct 13, 2022 - 7:15 p.m.
CVE-2022-42160
cve-2022-42160
d-link covr
command injection
ntpserversettings
vulnerability
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
36.8%
D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the system_time_timezone parameter at function SetNTPServerSettings.
Affected configurations
Node
dlinkcovr_1203_firmwareMatch1.08
dlinkcovr_1203Match-
Node
dlinkcovr_1202_firmwareMatch1.08
dlinkcovr_1202Match-
Node
dlinkcovr_1200_firmwareMatch1.08
dlinkcovr_1200Match-
| CPE | Name | Operator | Version |
|---|---|---|---|
| dlink:covr_1203_firmware | dlink covr 1203 firmware | eq | 1.08 |
References
Social References
More
Related
nvd
nvd
CVE-2022-42160
2022-10-13 19:15:10
cvelist
cvelist
CVE-2022-42160
2022-10-13 00:00:00
prion
prion
Command injection
2022-10-13 19:15:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
36.8%
Related for CVE-2022-42160