Lucene search

[email protected]NVD:CVE-2022-38873

HistoryDec 20, 2022 - 8:15 p.m.

CVE-2022-38873

2022-12-2020:15:09

[email protected]

web.nvd.nist.gov

d-link

firmware

header modification

dos

dap-2310

dap-2330

dap-2360

dap-2553

dap-2660

dap-2690

dap-2695

dap-3320

dap-3662

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

53.1%

JSON

D-Link devices DAP-2310 v2.10rc036 and earlier, DAP-2330 v1.06rc020 and earlier, DAP-2360 v2.10rc050 and earlier, DAP-2553 v3.10rc031 and earlier, DAP-2660 v1.15rc093 and earlier, DAP-2690 v3.20rc106 and earlier, DAP-2695 v1.20rc119_beta31 and earlier, DAP-3320 v1.05rc027 beta and earlier, DAP-3662 v1.05rc047 and earlier allows attackers to cause a Denial of Service (DoS) via uploading a crafted firmware after modifying the firmware header.

Affected configurations

Nvd

Node

dlinkdap-2310_firmwareRange≤2.10rc036

AND

dlinkdap-2310Match-

Node

dlinkdap-2330_firmwareRange≤1.06rc020

AND

dlinkdap-2330Match-

Node

dlinkdap-2360_firmwareRange≤2.10rc050

AND

dlinkdap-2360Match-

Node

dlinkdap-2553_firmwareRange≤3.10rc031

AND

dlinkdap-2553Match-

Node

dlinkdap-2660_firmwareRange≤1.15rc093

AND

dlinkdap-2660Match-

Node

dlinkdap-2690_firmwareRange≤3.20rc106

AND

dlinkdap-2690Match-

Node

dlinkdap-2695_firmwareRange<1.20rc119

dlinkdap-2695_firmwareMatch1.20rc119beta31

AND

dlinkdap-2695Match-

Node

dlinkdap-3320_firmwareRange<1.05rc027

dlinkdap-3320_firmwareMatch1.05rc027beta

AND

dlinkdap-3320Match-

Node

dlinkdap-3662_firmwareRange≤1.05rc047

AND

dlinkdap-3662Match-

VendorProductVersionCPE
dlinkdap-2310_firmware*cpe:2.3:o:dlink:dap-2310_firmware:*:*:*:*:*:*:*:*
dlinkdap-2310-cpe:2.3:h:dlink:dap-2310:-:*:*:*:*:*:*:*
dlinkdap-2330_firmware*cpe:2.3:o:dlink:dap-2330_firmware:*:*:*:*:*:*:*:*
dlinkdap-2330-cpe:2.3:h:dlink:dap-2330:-:*:*:*:*:*:*:*
dlinkdap-2360_firmware*cpe:2.3:o:dlink:dap-2360_firmware:*:*:*:*:*:*:*:*
dlinkdap-2360-cpe:2.3:h:dlink:dap-2360:-:*:*:*:*:*:*:*
dlinkdap-2553_firmware*cpe:2.3:o:dlink:dap-2553_firmware:*:*:*:*:*:*:*:*
dlinkdap-2553-cpe:2.3:h:dlink:dap-2553:-:*:*:*:*:*:*:*
dlinkdap-2660_firmware*cpe:2.3:o:dlink:dap-2660_firmware:*:*:*:*:*:*:*:*
dlinkdap-2660-cpe:2.3:h:dlink:dap-2660:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dlink	dap-2310_firmware	*	cpe:2.3:o:dlink:dap-2310_firmware::::::::
dlink	dap-2310	-	cpe:2.3:h:dlink:dap-2310:-:::::::*
dlink	dap-2330_firmware	*	cpe:2.3:o:dlink:dap-2330_firmware::::::::
dlink	dap-2330	-	cpe:2.3:h:dlink:dap-2330:-:::::::*
dlink	dap-2360_firmware	*	cpe:2.3:o:dlink:dap-2360_firmware::::::::
dlink	dap-2360	-	cpe:2.3:h:dlink:dap-2360:-:::::::*
dlink	dap-2553_firmware	*	cpe:2.3:o:dlink:dap-2553_firmware::::::::
dlink	dap-2553	-	cpe:2.3:h:dlink:dap-2553:-:::::::*
dlink	dap-2660_firmware	*	cpe:2.3:o:dlink:dap-2660_firmware::::::::
dlink	dap-2660	-	cpe:2.3:h:dlink:dap-2660:-:::::::*

Rows per page:

1-10 of 201

References

github.com/Yuhao-W/BUG--D-Link--Firmware-Update-Vulnerabilities/blob/main/README.md

www.dlink.com/en/security-bulletin/

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

53.1%

JSON

Related for NVD:CVE-2022-38873

prion1 cvelist1 cve1