CVE-2022-35619

D-LINK DIR-818LW A1:DIR818L_FW105b01 was discovered to contain a remote code execution (RCE) vulnerability via the function ssdpcgi_main

published August 3, 2022

CVSS
—
EPSS
3%
Percentile
85.7
In the wild
Unconfirmed
What it is

🚨 A clever little bug in the D-LINK DIR-818LW could let an attacker execute remote code with ease! 🔥 Think of it like a waiter who, without checking your order, serves whatever someone else asks for — just a few words and they’ve taken control of the kitchen! If exploited, this vulnerability could allow an attacker to slip in and run malicious commands on your device, potentially gaining full control over your network. Imagine finding out that a stranger has been in your home, rearranging your furniture and snooping through your personal files!

Put simply

Think of it like a waiter who, without checking your order, serves whatever someone else asks for — just a few words and they’ve taken control of the kitchen! The RCE vulnerability arises from the 'ssdpcgi_main' function, which fails to properly validate inputs, allowing an attacker to send crafted data to execute arbitrary commands remotely.

What to do

If exploited, this vulnerability could allow an attacker to slip in and run malicious commands on your device, potentially gaining full control over your network. Imagine finding out that a stranger has been in your home, rearranging your furniture and snooping through your personal files! To protect your network, update the D-LINK DIR-818LW to the latest firmware version available. Regularly check for updates and consider disabling unnecessary features to minimize exposure. You’ve got this! Stay vigilant and keep your network secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02683 · 85.7th percentile
Published
2022-08-03T14:06Z
EPSS history
Timeline
  • 03 AUG 14:06Z
    D-LINK DIR-818LW A1:DIR818L_FW105b01 was discovered to contain a remote code execution (RCE) vulnerability via the function ssdpcgi_main
    cvelistv5