CVE-2022-36756

DIR-845L A1 (v1.00–v1.03) is affected by a command-injection vulnerability exposed at /htdocs/upnpinc/gena.php. The root cause and fixed version are not detailed in the provided documents. Impact is described as high (remote code execution potential). CVSSv3.1 base score 9.8 (network attack with ...

CVE-2022-36756

DIR845L A1 v1.00-v1.03 is vulnerable to command injection via /htdocs/upnpinc/gena.php...

CVE-2022-36755

CVE-2022-36755 affects D-Link DIR845L A1 with an authentication flaw exploitable via an AUTHORIZED_GROUP=1 value, demonstrated by a getcfg.php request. CVSSv3.1 base score 9.8 (CRITICAL) with network access, no user interaction required, and impacts on confidentiality, integrity, and availability...

CVE-2022-36755

D-Link DIR845L A1 contains a authentication vulnerability via an AUTHORIZEDGROUP=1 value, as demonstrated by a request for getcfg.php...

PT-2022-23607 · D Link · D-Link Dir-845L

Name of the Vulnerable Software and Affected Versions: D-Link DIR845L version A1 Description: The issue concerns an authentication vulnerability. It can be exploited via an AUTHORIZED GROUP=1 value. This is demonstrated by sending a request for "getcfg.php", an API endpoint. Recommendations: For...