CVE-2022-28896

A command injection vulnerability in the component /setnetworksettings/SubnetMask of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privileges to…

published May 10, 2022

CVSS
—
EPSS
4%
Percentile
89.2
In the wild
Unconfirmed
What it is

🚨 A crafty command injection vulnerability lurks in the D-Link DIR882 router's network settings! With just the right payload, an attacker could potentially escalate privileges to root! 🔥 Think of this like a sneaky maintenance worker who finds a way to skip past the front desk and access the server room — undetected and with the keys to the kingdom! 🏰 If exploited, this vulnerability could give attackers full control over the router, allowing them to change network settings, block access to certain devices, or even spy on traffic. It’s like handing over the control panel of your entire network to a stranger! Yikes!

Put simply

Think of this like a sneaky maintenance worker who finds a way to skip past the front desk and access the server room — undetected and with the keys to the kingdom! 🏰 This command injection vulnerability in the /setnetworksettings/SubnetMask component allows attackers to execute arbitrary commands with root privileges, enabling unauthorized changes to the device's configuration.

What to do

If exploited, this vulnerability could give attackers full control over the router, allowing them to change network settings, block access to certain devices, or even spy on traffic. It’s like handing over the control panel of your entire network to a stranger! Yikes! To protect your network, ensure you update your D-Link DIR882 firmware to the latest version as soon as possible. Regularly check for updates and consider changing default credentials to strengthen security. 🛡️ You've got this! Stay proactive, keep your devices updated, and you'll be a security hero in no time! 🌟

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03521 · 89.2th percentile
Published
2022-05-10T13:17Z
EPSS history
Timeline
  • 10 MAY 13:17Z
    A command injection vulnerability in the component /setnetworksettings/SubnetMask of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privileges to…
    cvelistv5