[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpQigy9I625izRKFrZjHiIiEyvodO3AMHg4eDfxCnous":3,"g5a-ex:d-link\u002Fdir-822_firmware@*":73,"g5a-family:d-link\u002Fdir-822_firmware":75},{"success":4,"data":5},true,{"product":6,"versions":21,"topVulnerabilitiesByEpss":24,"kevVulnerabilities":50,"seoMetadata":51,"meta":70},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":20},"d-link","dir-822_firmware",2,5,0,"2020-08-18",[14,18],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"202krb06",4,false,{"version":19,"cve_count":11,"kev_count":11,"has_kev":17},"3.10b06","Dir-822 Firmware by D-link is a technology product with 2 tracked versions and 5 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[22,23],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":11,"kev_count":11,"has_kev":17},[25,33,37,41,45],{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":17,"epssScore":32},"CVE-2018-19986","In the \u002FHNAP1\u002FSetRouterSettings message, the RemotePort parameter is vulnerable, and the vulnerability affects D-Link DIR-818LW Rev.A 2.05.B03 and DIR-822 B1 202KRb06 devices. In the SetRouterSettings.php source code, the RemotePort parameter is saved in the $path_inf_wan1.\"\u002Fweb\" internal configuration memory without any regex checking. And in the IPTWAN_build_command function of the iptwan.php source code, the data in $path_inf_wan1.\"\u002Fweb\" is used with the iptables command without any regex checking. A vulnerable \u002FHNAP1\u002FSetRouterSettings XML message could have shell metacharacters in the RemotePort element such as the `telnetd` string.","2019-05-13",9.8,"v3.0","Critical",0.41606,{"cveId":34,"description":35,"publishedDate":28,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":17,"epssScore":36},"CVE-2018-19987","D-Link DIR-822 Rev.B 202KRb06, DIR-822 Rev.C 3.10B06, DIR-860L Rev.B 2.03.B03, DIR-868L Rev.B 2.05B02, DIR-880L Rev.A 1.20B01_01_i3se_BETA, and DIR-890L Rev.A 1.21B02_BETA devices mishandle IsAccessPoint in \u002FHNAP1\u002FSetAccessPointMode. In the SetAccessPointMode.php source code, the IsAccessPoint parameter is saved in the ShellPath script file without any regex checking. After the script file is executed, the command injection occurs. A vulnerable \u002FHNAP1\u002FSetAccessPointMode XML message could have shell metacharacters in the IsAccessPoint element such as the `telnetd` string.",0.12932,{"cveId":38,"description":39,"publishedDate":28,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":17,"epssScore":40},"CVE-2018-19989","In the \u002FHNAP1\u002FSetQoSSettings message, the uplink parameter is vulnerable, and the vulnerability affects D-Link DIR-822 Rev.B 202KRb06 and DIR-822 Rev.C 3.10B06 devices. In the SetQoSSettings.php source code, the uplink parameter is saved in the \u002Fbwc\u002Fentry:1\u002Fbandwidth and \u002Fbwc\u002Fentry:2\u002Fbandwidth internal configuration memory without any regex checking. And in the bwc_tc_spq_start, bwc_tc_wfq_start, and bwc_tc_adb_start functions of the bwcsvcs.php source code, the data in \u002Fbwc\u002Fentry:1\u002Fbandwidth and \u002Fbwc\u002Fentry:2\u002Fbandwidth is used with the tc command without any regex checking. A vulnerable \u002FHNAP1\u002FSetQoSSettings XML message could have shell metacharacters in the uplink element such as the `telnetd` string.",0.05543,{"cveId":42,"description":43,"publishedDate":28,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":17,"epssScore":44},"CVE-2018-19990","In the \u002FHNAP1\u002FSetWiFiVerifyAlpha message, the WPSPIN parameter is vulnerable, and the vulnerability affects D-Link DIR-822 B1 202KRb06 devices. In the SetWiFiVerifyAlpha.php source code, the WPSPIN parameter is saved in the $rphyinf1.\"\u002Fmedia\u002Fwps\u002Fenrollee\u002Fpin\" and $rphyinf2.\"\u002Fmedia\u002Fwps\u002Fenrollee\u002Fpin\" and $rphyinf3.\"\u002Fmedia\u002Fwps\u002Fenrollee\u002Fpin\" internal configuration memory without any regex checking. And in the do_wps function of the wps.php source code, the data in $rphyinf3.\"\u002Fmedia\u002Fwps\u002Fenrollee\u002Fpin\" is used with the wpatalk command without any regex checking. A vulnerable \u002FHNAP1\u002FSetWiFiVerifyAlpha XML message could have shell metacharacters in the WPSPIN element such as the `telnetd` string.",0.05123,{"cveId":46,"description":47,"publishedDate":12,"cvssScore":29,"cvssVersion":48,"severity":31,"isKev":17,"epssScore":49},"CVE-2019-6258","D-Link DIR-822 Rev.Bx devices with firmware v.202KRb06 and older allow a buffer overflow via long MacAddress data in a \u002FHNAP1\u002FSetClientInfo HNAP protocol message, which is mishandled in \u002Fusr\u002Fsbin\u002Fudhcpd during reading of the \u002Fvar\u002Fservd\u002FLAN-1-udhcpd.conf file.","v3.1",0.02617,[],{"title":52,"metaDescription":53,"keywords":54,"structuredData":55},"Dir-822 Firmware by D-link - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Dir-822 Firmware by D-link covering 2 versions with 5 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Dir-822 Firmware vulnerabilities, Dir-822 Firmware security, Dir-822 Firmware CVE, D-link Dir-822 Firmware, Dir-822 Firmware threat intelligence, D-link security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":56,"@type":57,"name":58,"description":53,"url":59,"manufacturer":60,"applicationCategory":64,"softwareVersion":65,"mainEntity":66},"https:\u002F\u002Fschema.org","SoftwareApplication","Dir-822 Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fd-link\u002Fdir-822_firmware",{"@type":61,"name":62,"url":63},"Organization","D-link","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fd-link","Security Software","2 versions tracked",{"@type":67,"name":68,"description":69,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Dir-822 Firmware Security Vulnerabilities","Security vulnerabilities affecting Dir-822 Firmware by D-link",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":71,"apiVersion":72},"2026-10-17T20:55:19.957Z","3.0",{"rows":74,"total":11,"capped":17,"failed":11},[],[]]