CVE-2024-33342

The D-Link DIR-822+ wireless router (version V1.0.5 ) is vulnerable to a command injection flaw in the SetPlcNetworkpwd function of the prog.cgi script. The root cause is the failure to properly sanitize special elements in the operating system command when processing the local_plc parameter. Thi...