EUVD-2022-45233

Malicious code in bioql PyPI...

CVE-2022-42159

D-Link COVR 1200,1202,1203 v1.08 was discovered to have a predictable seed in a Pseudo-Random Number Generator...

CVE-2022-42156

D-Link COVR 1200,1203 v1.08 was discovered to contain a command injection vulnerability via the tomographypingnumber parameter at function SetNetworkTomographySettings...

CVE-2022-42159: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)

D-Link COVR 1200,1202,1203 v1.08 was discovered to have a predictable seed in a Pseudo-Random Number Generator...

CVE-2022-42160: Improper Neutralization of Special Elements used in a Command

D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the systemtimetimezone parameter at function SetNTPServerSettings...

CVE-2022-42161: Improper Neutralization of Special Elements used in a Command

D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the /SetTriggerWPS/PIN parameter at function SetTriggerWPS...

CVE-2022-42159

CVE-2022-42159 affects D-Link COVR 1200/1202/1203 v1.08. The issue is a predictable seed in the device’s pseudo-random number generator, as described across multiple sources. Documented impact is limited in the provided materials; exploitation details are not listed. Some connected sources (PT-20...

CVE-2022-42156

D-Link COVR 1200/1202/1203 v1.08 exposes a command-injection in SetNetworkTomographySettings via the tomography_ping_number parameter. The vulnerability originates from insufficient data sanitization at the management level, enabling a remote attacker to execute arbitrary commands. Reported impac...