CVE-2022-26258 — D-Link DIR-820L Remote Code Execution Vulnerability

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2022-09-08 00:00 UTC
  • Importiert: 2026-10-20 22:46 UTC
  • CVSS: 9.8
  • Quelle-ID: cisa_kev
  • uid_hash: 9b39adf30d5f00c6dd16110851ee3d2b19665775a93551452884efcea421cac3

Inhalt

Vendor / Project: D-Link Product: DIR-820L Description: D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter in /lan.asp which allows for remote code execution. Required Action: The impacted product is end-of-life and should be disconnected if still in use. Due Date: 2022-09-29 Ransomware Campaign Use: Unknown CWEs: CWE-78 Notes: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10295; https://nvd.nist.gov/vuln/detail/CVE-2022-26258

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2022-26258

CRITICAL

9.8

CRITICAL

9.8

2022-03-27

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
CISA – Known Exploited Vulnerabilities (KEV)

cisa_kev

threat_intel cisa, kev - de https://raw.githubusercontent.com/cisagov/kev-data/develop/known_exploited_vulnerabilities.json