CVE-2022-44929

An access control issue in D-Link DVG-G5402SP GE1.03 allows unauthenticated attackers to escalate privileges via arbitrarily editing VoIP SIB profiles...

CVE-2022-44929

An access control issue in D-Link DVG-G5402SP GE1.03 allows unauthenticated attackers to escalate privileges via arbitrarily editing VoIP SIB profiles...

CVE-2022-44929

An access control issue in D-Link DVG-G5402SP GE1.03 allows unauthenticated attackers to escalate privileges via arbitrarily editing VoIP SIB profiles...

CVE-2022-44928

D-Link DVG-G5402SP GE1.03 was discovered to contain a command injection vulnerability via the Maintenance function...

CVE-2022-44928

D-Link DVG-G5402SP GE1.03 was discovered to contain a command injection vulnerability via the Maintenance function...

Command injection

D-Link DVG-G5402SP GE1.03 was discovered to contain a command injection vulnerability via the Maintenance function...

PT-2022-27332 · D Link · D-Link Dvg-G5402Sp

Name of the Vulnerable Software and Affected Versions: D-Link DVG-G5402SP version GE 1.03 Description: A command injection issue was found in the Maintenance function, allowing for potential exploitation. Recommendations: For D-Link DVG-G5402SP version GE 1.03, as a temporary workaround, consider...

CVE-2022-44929

CVE-2022-44929 affects the D-Link DVG-G5402SP, GE 1.03. The issue is an access control flaw that allows unauthenticated attackers to escalate privileges by arbitrarily editing VoIP SIB profiles. Concrete data from connected documents show a high/critical impact (CVSS v3.1 base score 9.8) with net...

D-Link DVG-G5402SP 操作系统命令注入漏洞

The D-Link DVG-G5402SP is a wireless router from China-based AUO D-Link. An operating system command injection vulnerability exists in the D-Link DVG-G5402SP firmware version GE1.03, which stems from its Maintenance function that allows an attacker to implement command injection...

CVE-2022-44928

D-Link DVG-G5402SP GE1.03 was discovered to contain a command injection vulnerability via the Maintenance function...

CVE-2022-44928

D-Link DVG-G5402SP GE1.03 was discovered to contain a command injection vulnerability via the Maintenance function...

CVE-2022-44928

CVE-2022-44928 affects D-Link DVG-G5402SP with firmware GE_1.03. A command injection vulnerability exists in the Maintenance function, enabling potential arbitrary command execution. Documented impact is high (network access, no privileges required, no user interaction). Some sources highlight la...

PT-2022-27333 · D Link · D-Link Dvg-G5402Sp

Name of the Vulnerable Software and Affected Versions: D-Link DVG-G5402SP version GE 1.03 Description: An access control issue allows unauthenticated attackers to escalate privileges via arbitrarily editing VoIP SIB profiles. Recommendations: For D-Link DVG-G5402SP version GE 1.03, consider...

CVE-2022-44929

An access control issue in D-Link DVG-G5402SP GE1.03 allows unauthenticated attackers to escalate privileges via arbitrarily editing VoIP SIB profiles...

CVE-2022-44929: Incorrect Default Permissions

An access control issue in D-Link DVG-G5402SP GE1.03 allows unauthenticated attackers to escalate privileges via arbitrarily editing VoIP SIB profiles...

CVE-2022-44928: Improper Neutralization of Special Elements used in an OS Command

D-Link DVG-G5402SP GE1.03 was discovered to contain a command injection vulnerability via the Maintenance function...

CVE-2022-44929

An access control issue in D-Link DVG-G5402SP GE1.03 allows unauthenticated attackers to escalate privileges via arbitrarily editing VoIP SIB profiles...