Lucene search
HistoryOct 13, 2022 - 7:15 p.m.
CVE-2022-42160
d-link covr 1200
setntpserversettings
command injection
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
36.8%
D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the system_time_timezone parameter at function SetNTPServerSettings.
Affected configurations
Node
dlinkcovr_1203_firmwareMatch1.08
dlinkcovr_1203Match-
Node
dlinkcovr_1202_firmwareMatch1.08
dlinkcovr_1202Match-
Node
dlinkcovr_1200_firmwareMatch1.08
dlinkcovr_1200Match-
Related
cve
cve
CVE-2022-42160
2022-10-13 19:15:10
cvelist
cvelist
CVE-2022-42160
2022-10-13 00:00:00
prion
prion
Command injection
2022-10-13 19:15:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
36.8%
Related for NVD:CVE-2022-42160