[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f9QhDah3t5FaFwbXZ_uPtm-3Q7_JTLi5P0mJ2TmhhoLM":3,"g5a-family:dlink\u002Fdir-822":103,"g5a-ex:dlink\u002Fdir-822@*":107},{"success":4,"data":5},true,{"product":6,"versions":18,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":75,"seoMetadata":81,"meta":100},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":17},"dlink","dir-822",1,15,"2024-01-19",[13],{"version":14,"cve_count":9,"kev_count":15,"has_kev":16},"a1",0,false,"Dir-822 by Dlink is a technology product with 1 tracked version and 15 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[19],{"version":14,"cve_count":9,"kev_count":15,"has_kev":16},[21,29,35,40,46,50,55,59,63,68],{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":4,"epssScore":28},"CVE-2019-17621","The UPnP endpoint URL \u002Fgena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.","2019-12-30",9.8,"v3.1","Critical",0.89624,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":25,"cvssVersion":33,"severity":27,"isKev":16,"epssScore":34},"CVE-2016-6563","Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action, Username, LoginPassword, and Captcha. The following products are affected: DIR-823, DIR-822, DIR-818L(W), DIR-895L, DIR-890L, DIR-885L, DIR-880L, DIR-868L, and DIR-850L.","2018-07-13","v3.0",0.79735,{"cveId":36,"description":37,"publishedDate":38,"cvssScore":25,"cvssVersion":33,"severity":27,"isKev":16,"epssScore":39},"CVE-2018-19986","In the \u002FHNAP1\u002FSetRouterSettings message, the RemotePort parameter is vulnerable, and the vulnerability affects D-Link DIR-818LW Rev.A 2.05.B03 and DIR-822 B1 202KRb06 devices. In the SetRouterSettings.php source code, the RemotePort parameter is saved in the $path_inf_wan1.\"\u002Fweb\" internal configuration memory without any regex checking. And in the IPTWAN_build_command function of the iptwan.php source code, the data in $path_inf_wan1.\"\u002Fweb\" is used with the iptables command without any regex checking. A vulnerable \u002FHNAP1\u002FSetRouterSettings XML message could have shell metacharacters in the RemotePort element such as the `telnetd` string.","2019-05-13",0.41606,{"cveId":41,"description":42,"publishedDate":11,"cvssScore":43,"cvssVersion":26,"severity":44,"isKev":16,"epssScore":45},"CVE-2024-0717","A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825AC, DIR-825ACF, DIR-825ACG1, DIR-841, DIR-842, DIR-842S, DIR-843, DIR-853, DIR-878, DIR-882, DIR-1210, DIR-1260, DIR-2150, DIR-X1530, DIR-X1860, DSL-224, DSL-245GR, DSL-2640U, DSL-2750U, DSL-G2452GR, DVG-5402G, DVG-5402G, DVG-5402GFRU, DVG-N5402G, DVG-N5402G-IL, DWM-312W, DWM-321, DWR-921, DWR-953 and Good Line Router v2 up to 20240112. This vulnerability affects unknown code of the file \u002Fdevinfo of the component HTTP GET Request Handler. The manipulation of the argument area with the input notice|net|version leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251542 is the identifier assigned to this vulnerability.",5.3,"Medium",0.18195,{"cveId":47,"description":48,"publishedDate":38,"cvssScore":25,"cvssVersion":33,"severity":27,"isKev":16,"epssScore":49},"CVE-2018-19987","D-Link DIR-822 Rev.B 202KRb06, DIR-822 Rev.C 3.10B06, DIR-860L Rev.B 2.03.B03, DIR-868L Rev.B 2.05B02, DIR-880L Rev.A 1.20B01_01_i3se_BETA, and DIR-890L Rev.A 1.21B02_BETA devices mishandle IsAccessPoint in \u002FHNAP1\u002FSetAccessPointMode. In the SetAccessPointMode.php source code, the IsAccessPoint parameter is saved in the ShellPath script file without any regex checking. After the script file is executed, the command injection occurs. A vulnerable \u002FHNAP1\u002FSetAccessPointMode XML message could have shell metacharacters in the IsAccessPoint element such as the `telnetd` string.",0.12932,{"cveId":51,"description":52,"publishedDate":53,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":54},"CVE-2016-5681","Stack-based buffer overflow in dws\u002Fapi\u002FLogin on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR-822 C1 3.01 before 3.01WWb02, DIR-823 A1 1.00 before 1.00WWb05, DIR-895L A1 1.11 before 1.11WWb04, DIR-890L A1 1.09 before 1.09b14, DIR-885L A1 1.11 before 1.11WWb07, DIR-880L A1 1.07 before 1.07WWb08, DIR-868L B1 2.03 before 2.03WWb01, and DIR-868L C1 3.00 before 3.00WWb01 devices allows remote attackers to execute arbitrary code via a long session cookie.","2016-08-25",0.11927,{"cveId":56,"description":57,"publishedDate":38,"cvssScore":25,"cvssVersion":33,"severity":27,"isKev":16,"epssScore":58},"CVE-2018-19989","In the \u002FHNAP1\u002FSetQoSSettings message, the uplink parameter is vulnerable, and the vulnerability affects D-Link DIR-822 Rev.B 202KRb06 and DIR-822 Rev.C 3.10B06 devices. In the SetQoSSettings.php source code, the uplink parameter is saved in the \u002Fbwc\u002Fentry:1\u002Fbandwidth and \u002Fbwc\u002Fentry:2\u002Fbandwidth internal configuration memory without any regex checking. And in the bwc_tc_spq_start, bwc_tc_wfq_start, and bwc_tc_adb_start functions of the bwcsvcs.php source code, the data in \u002Fbwc\u002Fentry:1\u002Fbandwidth and \u002Fbwc\u002Fentry:2\u002Fbandwidth is used with the tc command without any regex checking. A vulnerable \u002FHNAP1\u002FSetQoSSettings XML message could have shell metacharacters in the uplink element such as the `telnetd` string.",0.05543,{"cveId":60,"description":61,"publishedDate":38,"cvssScore":25,"cvssVersion":33,"severity":27,"isKev":16,"epssScore":62},"CVE-2018-19990","In the \u002FHNAP1\u002FSetWiFiVerifyAlpha message, the WPSPIN parameter is vulnerable, and the vulnerability affects D-Link DIR-822 B1 202KRb06 devices. In the SetWiFiVerifyAlpha.php source code, the WPSPIN parameter is saved in the $rphyinf1.\"\u002Fmedia\u002Fwps\u002Fenrollee\u002Fpin\" and $rphyinf2.\"\u002Fmedia\u002Fwps\u002Fenrollee\u002Fpin\" and $rphyinf3.\"\u002Fmedia\u002Fwps\u002Fenrollee\u002Fpin\" internal configuration memory without any regex checking. And in the do_wps function of the wps.php source code, the data in $rphyinf3.\"\u002Fmedia\u002Fwps\u002Fenrollee\u002Fpin\" is used with the wpatalk command without any regex checking. A vulnerable \u002FHNAP1\u002FSetWiFiVerifyAlpha XML message could have shell metacharacters in the WPSPIN element such as the `telnetd` string.",0.05123,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":67},"CVE-2019-6258","D-Link DIR-822 Rev.Bx devices with firmware v.202KRb06 and older allow a buffer overflow via long MacAddress data in a \u002FHNAP1\u002FSetClientInfo HNAP protocol message, which is mishandled in \u002Fusr\u002Fsbin\u002Fudhcpd during reading of the \u002Fvar\u002Fservd\u002FLAN-1-udhcpd.conf file.","2020-08-18",0.02617,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":72,"cvssVersion":33,"severity":73,"isKev":16,"epssScore":74},"CVE-2018-20674","D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta devices allow authenticated remote command execution.","2019-01-09",8.8,"High",0.02534,[76],{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"severity":27,"isKev":4,"epssScore":28,"cisaVulnName":77,"cisaDateAdded":78,"cisaShortDescription":79,"cisaRequiredAction":80},"D-Link DIR-859 Router Command Execution Vulnerability","2023-06-29","D-Link DIR-859 router contains a command execution vulnerability in the UPnP endpoint URL, \u002Fgena.cgi. Exploitation allows an unauthenticated remote attacker to execute system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.","Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.",{"title":82,"metaDescription":83,"keywords":84,"structuredData":85},"Dir-822 by Dlink - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Dir-822 by Dlink covering 1 version with 15 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Dir-822 vulnerabilities, Dir-822 security, Dir-822 CVE, Dlink Dir-822, Dir-822 threat intelligence, Dlink security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Dir-822 KEV, Dir-822 exploited vulnerabilities",{"@context":86,"@type":87,"name":88,"description":83,"url":89,"manufacturer":90,"applicationCategory":94,"softwareVersion":95,"mainEntity":96},"https:\u002F\u002Fschema.org","SoftwareApplication","Dir-822","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fdlink\u002Fdir-822",{"@type":91,"name":92,"url":93},"Organization","Dlink","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fdlink","Security Software","1 versions tracked",{"@type":97,"name":98,"description":99,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Dir-822 Security Vulnerabilities","Security vulnerabilities affecting Dir-822 by Dlink",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":101,"apiVersion":102},"2026-10-17T21:01:30.124Z","3.0",[104],{"product":105,"cves":106},"dir-822_firmware",12,{"rows":108,"total":9,"capped":16,"failed":15},[109],{"cveId":22,"name":77,"severity":27,"cvss":25,"added":78,"epss":28,"published":110,"ranges":111,"checked":4,"hits":112,"covers":16},"2019-12-30T17:15:19.857",[],[]]