CVE-2022-40946

CVE-2022-40946 affects D-Link DIR-819 (Firmware 1.06, Hardware A1). A DoS can be triggered via the sys_token parameter in the CGI endpoint cgi-bin/webproc?getpage=html/index.html, leading to resource exhaustion. CVSS v3.1 base score 7.5 (NETWORK, LOW complexity, NONE privileges, U availability im...

CVE-2022-38258

The CVE-2022-38258 vulnerability affects D-Link DIR-819 (firmware v1.06) through a local file inclusion (LFI) in the web interface via the getpage parameter. The underlying issue allows an attacker to trigger a Denial of Service or access sensitive server information by crafting a crafted request...