CVE-2022-1262

The CVE-2022-1262 entry describes a command injection vulnerability in the protest binary that allows an attacker with access to the remote command line interface to execute arbitrary commands as root. Connected documents confirm the issue but provide no concrete details on affected versions or f...

CVE-2021-28144

The CVE-2021-28144 issue affects D-Link DIR-3060 routers, where the web management binary prog.cgi handles SOAP SetVirtualServerSettings in a way that can trigger an OS command via an unsafe popen path. Specifically, when LocalIPAddress is provided, Enabled is true, InternalPort is 9, and Protoco...

CVE-2022-44204

CVE-2022-44204 affects the D-Link DIR-3060 router (DIR3060A1_FW111B04.bin). The root cause is a boundary/size-check vulnerability in the function FUN_0049ac18 when handling untrusted input, leading to a remote code execution flaw. The vulnerability is exploitable over NETWORK with no user interac...