CVE-2022-43626

🗓️ 29 Mar 2023 00:00:00Reported by zdiType

This vulnerability in D-Link DIR-1935 1.03 routers allows network-adjacent attackers to execute arbitrary code by bypassing the authentication mechanism

Reporter	Title	Published	Views	Family All 10
CNNVD	D-Link DIR-1935 操作系统命令注入漏洞	29 Mar 202300:00	–	cnnvd
Cvelist	CVE-2022-43626	29 Mar 202300:00	–	cvelist
EUVD	EUVD-2022-46622	3 Oct 202520:07	–	euvd
NVD	CVE-2022-43626	29 Mar 202319:15	–	nvd
OSV	CVE-2022-43626	29 Mar 202319:15	–	osv
Prion	Design/Logic Flaw	29 Mar 202319:15	–	prion
Positive Technologies	PT-2022-5535 · D Link · D-Link Dir-1935	19 Jul 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-43626	23 May 202501:24	–	redhatcve
Vulnrichment	CVE-2022-43626	29 Mar 202300:00	–	vulnrichment
Zero Day Initiative	D-Link DIR-1935 SetIPv4FirewallSettings IPv4FirewallRule Command Injection Remote Code Execution Vulnerability	3 Nov 202200:00	–	zdi

NVD

Vulners

Node

dlink dir-1935_firmwareRange≤1.02

dlink dir-1935_firmwareMatch1.03b1

dlink dir-1935_firmwareMatch1.03b2

AND

dlink dir-1935Match-

[
  {
    "vendor": "D-Link",
    "product": "DIR-1935",
    "versions": [
      {
        "version": "1.03",
        "status": "affected"
      }
    ]
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-22-1497/
supportannouncement	www.supportannouncement.us.dlink.com/announcement/publication.aspx

21 Nov 2024 07:26Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.16.8

CVSS 36.8

EPSS0.0126

SSVC

CWE-78