CVE-2022-37057

2022-08-2816:15:09

CWE-78

[email protected]

web.nvd.nist.gov

d-link

gortac750

vulnerability

command injection

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

53.2%

JSON

D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Command Injection via cgibin, ssdpcgi_main.

Affected configurations

Nvd

Node

dlinkgo-rt-ac750_firmwareMatchreva_1.01b03

dlinkgo-rt-ac750_firmwareMatchrevb_2.00b02

AND

dlinkgo-rt-ac750Match-

VendorProductVersionCPE
dlinkgo-rt-ac750_firmwarereva_1.01b03cpe:2.3:o:dlink:go-rt-ac750_firmware:reva_1.01b03:*:*:*:*:*:*:*
dlinkgo-rt-ac750_firmwarerevb_2.00b02cpe:2.3:o:dlink:go-rt-ac750_firmware:revb_2.00b02:*:*:*:*:*:*:*
dlinkgo-rt-ac750-cpe:2.3:h:dlink:go-rt-ac750:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dlink	go-rt-ac750_firmware	reva_1.01b03	cpe:2.3:o:dlink:go-rt-ac750_firmware:reva_1.01b03:::::::*
dlink	go-rt-ac750_firmware	revb_2.00b02	cpe:2.3:o:dlink:go-rt-ac750_firmware:revb_2.00b02:::::::*
dlink	go-rt-ac750	-	cpe:2.3:h:dlink:go-rt-ac750:-:::::::*