CVE-2022-44201

D-Link DIR823G 1.02B05 is vulnerable to Commad Injection

Critical · published November 22, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
69.6
In the wild
Unconfirmed
What it is

🚨 A simple command injection flaw in the D-Link DIR823G 1.02B05 could give attackers the keys to your network! 🔥 Think of it like a waiter who brings your order to the wrong table without checking the name—anyone could claim your meal, or in this case, your network! 🍽️ An attacker could send malicious commands to the router, taking total control over your network. This means they could intercept sensitive data, change configurations, or even hijack your devices. The potential for chaos is absolutely devastating!

Put simply

Think of it like a waiter who brings your order to the wrong table without checking the name—anyone could claim your meal, or in this case, your network! 🍽️ This command injection vulnerability allows attackers to execute arbitrary commands through unsanitized input in the router's web interface, giving them full control over the device.

What to do

An attacker could send malicious commands to the router, taking total control over your network. This means they could intercept sensitive data, change configurations, or even hijack your devices. The potential for chaos is absolutely devastating! Update your D-Link DIR823G to the latest firmware version immediately. Regularly audit your network devices to ensure they are secure, and consider disabling remote management features unless absolutely necessary. 🛡️ You've got this! Follow these steps, and you'll have your network fortified in no time! 💪

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01271 · 69.6th percentile
Published
2022-11-22T00:00Z
EPSS history
Timeline
  • 22 NOV 00:00Z
    D-Link DIR823G 1.02B05 is vulnerable to Commad Injection
    cvelistv5