D-Link DIR-818LW Command Injection (CVE-2022-35620)

A command injection vulnerability exists in D-Link DIR-818LW. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2022-35620

CVE-2022-35620 affects D-LINK DIR-818LW A1 (DIR818L_FW105b01). The vulnerability is a remote code execution in the binary.soapcgi_main function, enabling an unauthenticated attacker over the network to run arbitrary code on the device. The CVSS base score is 9.8 (CRITICAL) with impact to confiden...