Command injection

2019-01-0900:29:00

PRIOn knowledge base

www.prio-n.com

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.9%

JSON

D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta devices allow authenticated remote command execution.

CPENameOperatorVersion
dir-822-us_firmwareeq<= 3.10b6
dir-822_firmwareeq<= 3.10b6
dir-850l_firmwareeq<= 1.21b7
dir-850l_firmwareeq<= 2.21b1
dir-850l_firmwareeq2.22b2 beta
dir-880l_firmwareeq<= 1.7.b8
dir-880l_firmwareeq1.20b1 beta

Name	Operator	Version
dir-822-us_firmware	eq	<= 3.10b6
dir-822_firmware	eq	<= 3.10b6
dir-850l_firmware	eq	<= 1.21b7
dir-850l_firmware	eq	<= 2.21b1
dir-850l_firmware	eq	2.22b2 beta
dir-880l_firmware	eq	<= 1.7.b8
dir-880l_firmware	eq	1.20b1 beta

References

securityadvisories.dlink.com/announcement/publication.aspx?name=SAP10101