CVE-2022-44807

D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow via webGetVarString

Critical · published November 22, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
69.9
In the wild
Unconfirmed
What it is

🚨 A major buffer overflow vulnerability in the D-Link DIR-882 means an attacker could easily take control of your router! 🔥 Think of this as a delivery person who gets access to your home by simply using an oversized package to jam the door open — once inside, they can rummage through anything! 📦 An attacker exploiting this could gain full control over the device, potentially intercepting your network traffic and accessing sensitive information. This is absolutely devastating if it falls into the wrong hands, as they could manipulate network settings or even launch attacks on other connected devices!

Put simply

Think of this as a delivery person who gets access to your home by simply using an oversized package to jam the door open — once inside, they can rummage through anything! 📦 The buffer overflow occurs via the webGetVarString function, allowing an attacker to execute arbitrary code by sending specially crafted input that exceeds the buffer's limit.

What to do

An attacker exploiting this could gain full control over the device, potentially intercepting your network traffic and accessing sensitive information. This is absolutely devastating if it falls into the wrong hands, as they could manipulate network settings or even launch attacks on other connected devices! Immediately patch your D-Link DIR-882 router to version 1.20B07 or later. Additionally, consider changing the default admin credentials and setting strong passwords to enhance your network security! You've got this! Update your router and keep your network safe! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01283 · 69.9th percentile
Published
2022-11-22T00:00Z
EPSS history
Timeline
  • 22 NOV 00:00Z
    D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow via webGetVarString
    cvelistv5