CVE-2022-37129

D-Link DIR-816 A2_v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand

published August 31, 2022

CVSS
—
EPSS
8%
Percentile
94.9
In the wild
Unconfirmed
What it is

D-Link DIR-816 A2_v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand. After the user passes in the command parameter, it will be spliced into byte_4836B0 by snprintf, and finally doSystem(&byte_4836B0); will be executed, resulting in a command injection.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08325 · 94.9th percentile
Published
2022-08-31T22:44Z
EPSS history
Timeline
  • 31 AUG 22:44Z
    D-Link DIR-816 A2_v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand
    cvelistv5