Lucene search
+L

10 matches found

CNVD
CNVD
•added 2022/12/20 12:00 a.m.•101 views

D-Link DIR-3040 Command Injection Vulnerability

D-Link DIR-3040 is a router from China Youxun D-Link. It provides the function of connecting to the network. D-Link DIR-3040 has a command injection vulnerability, which stems from the SetTriggerLEDBlink function fails to properly filter the construct command special characters, commands, etc. An...

9.6AI score0.03987EPSS
SaveExploits1
Prion
Prion
•added 2022/12/14 3:15 p.m.•26 views

Command injection

D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function...

7.5CVSS9.8AI score0.03987EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/12/14 12:00 a.m.•46 views

CVE-2022-44832

D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function...

10AI score0.03987EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/12/14 12:00 a.m.•17 views

D-Link DIR-3040 命令注入漏洞

D-Link DIR-3040 is a router from China Youxun D-Link. It provides the function of connecting to the network. D-Link DIR-3040 has a command injection vulnerability, which stems from the SetTriggerLEDBlink function fails to properly filter the construct command special characters, commands, etc. An...

9.8CVSS7.9AI score0.03987EPSS
SaveExploits1References4
CVE
CVE
•added 2022/12/14 12:00 a.m.•74 views

CVE-2022-44832

CVE-2022-44832 applies to the D-Link DIR-3040 router, specifically firmware 120B03, where the SetTriggerLEDBlink function fails to filter crafted input and enables command injection. Public sources across NVD/Red Hat/CNVD/CNVD variants consistently describe an arbitrary command execution vulnerab...

9.8CVSS9.8AI score0.03987EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/14 12:00 a.m.•3 views

CVE-2022-44832: Improper Neutralization of Special Elements used in a Command

D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function...

9.8CVSS5.9AI score0.03987EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/12/14 12:00 a.m.•12 views

PT-2022-27320 · D Link · D-Link Dir-3040

Name of the Vulnerable Software and Affected Versions: D-Link DIR-3040 version 120B03 Description: A command injection issue was discovered in the D-Link DIR-3040 device. The vulnerability is related to the SetTriggerLEDBlink function, which allows for command injection. Recommendations: For D-Li...

9.8CVSS9.8AI score0.03987EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2022/12/14 12:00 a.m.•9 views

CVE-2022-44832

D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function...

8.1AI score0.03987EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/10 12:00 a.m.•5 views

CVE-2022-28901: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability in the component /SetTriggerLEDBlink/Blink of D-Link DIR882 DIR882A1FW130B06 allows attackers to escalate privileges to root via a crafted payload...

10CVSS8AI score0.03521EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/05/10 12:00 a.m.•15 views

D-Link DIR882 操作系统命令注入漏洞

The D-Link DIR882 is a dual-band wireless router from China-based AUO D-Link. An operating system command injection vulnerability exists in the D-Link DIR882 DIR882A1FW130B06 firmware version, which stems from a command injection issue in component /SetTriggerLEDBlink/Blink. An attacker can explo...

10CVSS8.4AI score0.03521EPSS
SaveExploits1References3
Rows per page
Query Builder