[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f17KU8xcqK1dERuI2P-f9OVZ__DIbqPtwmLBjWl53n1U":3,"g5a-family:dlink\u002Fdir-822_firmware":135,"g5a-ex:dlink\u002Fdir-822_firmware@*":136},{"success":4,"data":5},true,{"product":6,"versions":39,"topVulnerabilitiesByEpss":50,"kevVulnerabilities":107,"seoMetadata":113,"meta":132},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":38},"dlink","dir-822_firmware",10,12,1,"2024-01-19",[14,19,21,23,25,27,29,31,33,36],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"1.0.2",3,0,false,{"version":20,"cve_count":17,"kev_count":17,"has_kev":18},"2.00krb06",{"version":22,"cve_count":17,"kev_count":17,"has_kev":18},"2.02krb01",{"version":24,"cve_count":17,"kev_count":17,"has_kev":18},"2.02krb05",{"version":26,"cve_count":17,"kev_count":17,"has_kev":18},"2.02krb06",{"version":28,"cve_count":17,"kev_count":17,"has_kev":18},"202krb06",{"version":30,"cve_count":17,"kev_count":17,"has_kev":18},"2.03b01",{"version":32,"cve_count":11,"kev_count":17,"has_kev":18},"3.01",{"version":34,"cve_count":35,"kev_count":17,"has_kev":18},"3.10b06",2,{"version":37,"cve_count":17,"kev_count":17,"has_kev":18},"3.12b04","Dir-822 Firmware by Dlink is a technology product with 10 tracked versions and 12 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[40,41,42,43,44,45,46,47,48,49],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":17,"kev_count":17,"has_kev":18},{"version":22,"cve_count":17,"kev_count":17,"has_kev":18},{"version":24,"cve_count":17,"kev_count":17,"has_kev":18},{"version":26,"cve_count":17,"kev_count":17,"has_kev":18},{"version":28,"cve_count":17,"kev_count":17,"has_kev":18},{"version":30,"cve_count":17,"kev_count":17,"has_kev":18},{"version":32,"cve_count":11,"kev_count":17,"has_kev":18},{"version":34,"cve_count":35,"kev_count":17,"has_kev":18},{"version":37,"cve_count":17,"kev_count":17,"has_kev":18},[51,59,65,71,76,81,85,92,98,103],{"cveId":52,"description":53,"publishedDate":54,"cvssScore":55,"cvssVersion":56,"severity":57,"isKev":4,"epssScore":58},"CVE-2019-17621","The UPnP endpoint URL \u002Fgena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.","2019-12-30",9.8,"v3.1","Critical",0.89624,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":55,"cvssVersion":63,"severity":57,"isKev":18,"epssScore":64},"CVE-2016-6563","Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action, Username, LoginPassword, and Captcha. The following products are affected: DIR-823, DIR-822, DIR-818L(W), DIR-895L, DIR-890L, DIR-885L, DIR-880L, DIR-868L, and DIR-850L.","2018-07-13","v3.0",0.79735,{"cveId":66,"description":67,"publishedDate":12,"cvssScore":68,"cvssVersion":56,"severity":69,"isKev":18,"epssScore":70},"CVE-2024-0717","A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825AC, DIR-825ACF, DIR-825ACG1, DIR-841, DIR-842, DIR-842S, DIR-843, DIR-853, DIR-878, DIR-882, DIR-1210, DIR-1260, DIR-2150, DIR-X1530, DIR-X1860, DSL-224, DSL-245GR, DSL-2640U, DSL-2750U, DSL-G2452GR, DVG-5402G, DVG-5402G, DVG-5402GFRU, DVG-N5402G, DVG-N5402G-IL, DWM-312W, DWM-321, DWR-921, DWR-953 and Good Line Router v2 up to 20240112. This vulnerability affects unknown code of the file \u002Fdevinfo of the component HTTP GET Request Handler. The manipulation of the argument area with the input notice|net|version leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251542 is the identifier assigned to this vulnerability.",5.3,"Medium",0.18195,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":55,"cvssVersion":63,"severity":57,"isKev":18,"epssScore":75},"CVE-2018-19987","D-Link DIR-822 Rev.B 202KRb06, DIR-822 Rev.C 3.10B06, DIR-860L Rev.B 2.03.B03, DIR-868L Rev.B 2.05B02, DIR-880L Rev.A 1.20B01_01_i3se_BETA, and DIR-890L Rev.A 1.21B02_BETA devices mishandle IsAccessPoint in \u002FHNAP1\u002FSetAccessPointMode. In the SetAccessPointMode.php source code, the IsAccessPoint parameter is saved in the ShellPath script file without any regex checking. After the script file is executed, the command injection occurs. A vulnerable \u002FHNAP1\u002FSetAccessPointMode XML message could have shell metacharacters in the IsAccessPoint element such as the `telnetd` string.","2019-05-13",0.12932,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":55,"cvssVersion":56,"severity":57,"isKev":18,"epssScore":80},"CVE-2016-5681","Stack-based buffer overflow in dws\u002Fapi\u002FLogin on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR-822 C1 3.01 before 3.01WWb02, DIR-823 A1 1.00 before 1.00WWb05, DIR-895L A1 1.11 before 1.11WWb04, DIR-890L A1 1.09 before 1.09b14, DIR-885L A1 1.11 before 1.11WWb07, DIR-880L A1 1.07 before 1.07WWb08, DIR-868L B1 2.03 before 2.03WWb01, and DIR-868L C1 3.00 before 3.00WWb01 devices allows remote attackers to execute arbitrary code via a long session cookie.","2016-08-25",0.11927,{"cveId":82,"description":83,"publishedDate":74,"cvssScore":55,"cvssVersion":63,"severity":57,"isKev":18,"epssScore":84},"CVE-2018-19989","In the \u002FHNAP1\u002FSetQoSSettings message, the uplink parameter is vulnerable, and the vulnerability affects D-Link DIR-822 Rev.B 202KRb06 and DIR-822 Rev.C 3.10B06 devices. In the SetQoSSettings.php source code, the uplink parameter is saved in the \u002Fbwc\u002Fentry:1\u002Fbandwidth and \u002Fbwc\u002Fentry:2\u002Fbandwidth internal configuration memory without any regex checking. And in the bwc_tc_spq_start, bwc_tc_wfq_start, and bwc_tc_adb_start functions of the bwcsvcs.php source code, the data in \u002Fbwc\u002Fentry:1\u002Fbandwidth and \u002Fbwc\u002Fentry:2\u002Fbandwidth is used with the tc command without any regex checking. A vulnerable \u002FHNAP1\u002FSetQoSSettings XML message could have shell metacharacters in the uplink element such as the `telnetd` string.",0.05543,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":89,"cvssVersion":63,"severity":90,"isKev":18,"epssScore":91},"CVE-2018-20674","D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta devices allow authenticated remote command execution.","2019-01-09",8.8,"High",0.02534,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":96,"cvssVersion":56,"severity":90,"isKev":18,"epssScore":97},"CVE-2019-20213","D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php.","2020-01-02",7.5,0.02181,{"cveId":99,"description":100,"publishedDate":101,"cvssScore":55,"cvssVersion":56,"severity":57,"isKev":18,"epssScore":102},"CVE-2023-51984","D-Link DIR-822+ V1.0.2 was found to contain a command injection in SetStaticRouteSettings function. allows remote attackers to execute arbitrary commands via shell.","2024-01-11",0.02024,{"cveId":104,"description":105,"publishedDate":88,"cvssScore":55,"cvssVersion":56,"severity":57,"isKev":18,"epssScore":106},"CVE-2018-20675","D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta devices allow authentication bypass.",0.01835,[108],{"cveId":52,"description":53,"publishedDate":54,"cvssScore":55,"severity":57,"isKev":4,"epssScore":58,"cisaVulnName":109,"cisaDateAdded":110,"cisaShortDescription":111,"cisaRequiredAction":112},"D-Link DIR-859 Router Command Execution Vulnerability","2023-06-29","D-Link DIR-859 router contains a command execution vulnerability in the UPnP endpoint URL, \u002Fgena.cgi. Exploitation allows an unauthenticated remote attacker to execute system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.","Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.",{"title":114,"metaDescription":115,"keywords":116,"structuredData":117},"Dir-822 Firmware by Dlink - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Dir-822 Firmware by Dlink covering 10 versions with 12 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Dir-822 Firmware vulnerabilities, Dir-822 Firmware security, Dir-822 Firmware CVE, Dlink Dir-822 Firmware, Dir-822 Firmware threat intelligence, Dlink security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Dir-822 Firmware KEV, Dir-822 Firmware exploited vulnerabilities",{"@context":118,"@type":119,"name":120,"description":115,"url":121,"manufacturer":122,"applicationCategory":126,"softwareVersion":127,"mainEntity":128},"https:\u002F\u002Fschema.org","SoftwareApplication","Dir-822 Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fdlink\u002Fdir-822_firmware",{"@type":123,"name":124,"url":125},"Organization","Dlink","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fdlink","Security Software","10 versions tracked",{"@type":129,"name":130,"description":131,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Dir-822 Firmware Security Vulnerabilities","Security vulnerabilities affecting Dir-822 Firmware by Dlink",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":133,"apiVersion":134},"2026-10-17T21:25:41.249Z","3.0",[],{"rows":137,"total":11,"capped":18,"failed":17},[138],{"cveId":52,"name":109,"severity":57,"cvss":55,"added":110,"epss":58,"published":139,"ranges":140,"checked":4,"hits":143,"covers":18},"2019-12-30T17:15:19.857",[141,142],"up to 2.03b01","up to 3.12b04",[]]