CVE-2022-42156

D-Link COVR 1200,1203 v1.08 was discovered to contain a command injection vulnerability via the tomographypingnumber parameter at function SetNetworkTomographySettings...

CVE-2022-42156

D-Link COVR 1200/1202/1203 v1.08 exposes a command-injection in SetNetworkTomographySettings via the tomography_ping_number parameter. The vulnerability originates from insufficient data sanitization at the management level, enabling a remote attacker to execute arbitrary commands. Reported impac...