CVE-2022-35620

D-LINK DIR-818LW A1:DIR818L_FW105b01 was discovered to contain a remote code execution (RCE) vulnerability via the function binary.soapcgi_main

published August 3, 2022

CVSS
β€”
EPSS
33%
Percentile
98.3
In the wild
Unconfirmed
What it is

🚨 A seemingly harmless function could turn your D-LINK DIR-818LW router into a hacker's playground! πŸ”₯ Think of the binary.soapcgi_main function as a guest book at a party β€” if nobody checks the names, an unwanted guest could easily stroll in and wreak havoc! If exploited, this remote code execution (RCE) vulnerability could allow an attacker to execute malicious commands on your router β€” potentially compromising your network security and privacy. Imagine them having full control over your device, accessing personal data, or even rerouting your internet traffic without you knowing!

Put simply

Think of the binary.soapcgi_main function as a guest book at a party β€” if nobody checks the names, an unwanted guest could easily stroll in and wreak havoc! CVE-2022-35620 exposes a remote code execution vulnerability in the D-LINK DIR-818LW router, allowing attackers to execute arbitrary commands via the function binary.soapcgi_main.

What to do

If exploited, this remote code execution (RCE) vulnerability could allow an attacker to execute malicious commands on your router β€” potentially compromising your network security and privacy. Imagine them having full control over your device, accessing personal data, or even rerouting your internet traffic without you knowing! To protect your network, update your D-LINK DIR-818LW firmware to the latest version immediately. Regularly check for updates and consider disabling any unneeded functions to minimize attack surfaces. It’s also wise to review your network settings for any unusual activity. You've got this! Stay proactive, follow the steps, and keep your network safe and sound. πŸ›‘οΈ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.32733 Β· 98.3th percentile
Published
2022-08-03T14:06Z
EPSS history
Timeline
  • 03 AUG 14:06Z
    D-LINK DIR-818LW A1:DIR818L_FW105b01 was discovered to contain a remote code execution (RCE) vulnerability via the function binary.soapcgi_main
    cvelistv5