CVE-2022-37130

In D-Link DIR-816 A2v1.10CNB04, DIR-878 DIR878FW1.30B08.img a command injection vulnerability occurs in /goform/Diagnosis, after the condition is met, setnum will be spliced into v10 by snprintf, and the system will be executed, resulting in a command injection vulnerability...

D-Link DIR-816 Command Injection (CVE-2022-37130)

A command injection vulnerability exists in D-Link DIR-816. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2022-37130

creationtimestamp| type| source ---|---|--- 2022-09-01 02:37:16+00:00| seen| https://t.me/cibsecurity/49153...

CVE-2022-37130

CVE-2022-37130 affects D-Link DIR-816 A2 v1.10CNB04 and DIR-878 DIR_878_FW1.30B08.img. A command injection exists in /goform/Diagnosis: when a condition is met, setnum is spliced into v10 via snprintf and the system is executed, enabling remote command execution. Exploitation details, affected ve...