CVE-2022-48107

D-Link DIR-878 firmware FW1.30B08 contains a command injection vulnerability in the /setnetworksettings/IPAddress component that allows an attacker to escalate to root privileges with a crafted payload. Affected device class: DIR-878 router; root cause: improper handling of network settings input...

CVE-2022-48108

Summary of CVE-2022-48108 (D-Link DIR-878): A command injection exists in the firmware version DIR_878_FW1.30B08, exploitable via the /SetNetworkSettings/SubnetMask component. The underlying issue allows an attacker to escalate privileges to root through a crafted payload, with network-based atta...