CVE-2022-44930

D-Link DHP-W310AV 3.10EU was discovered to contain a command injection vulnerability via the System Checks function

Critical · published December 2, 2022

CVSS v3.1
9.8
EPSS
3%
Percentile
84.9
In the wild
Unconfirmed
What it is

🚨 A command injection vulnerability in D-Link’s DHP-W310AV could let attackers take full control of your device with just a sneaky command! 🔥 Think of it like a mischievous friend who knows your Wi-Fi password and decides to rearrange your furniture without asking—what a chaotic surprise! This vulnerability allows attackers to send their own commands, similar to giving that friend a spare key without considering the consequences. An attacker could exploit this flaw to execute arbitrary commands on your device, potentially allowing them to steal sensitive information, alter settings, or even turn your network against you! This isn't just a minor inconvenience; it could lead to a full-blown security breach.

Put simply

Think of it like a mischievous friend who knows your Wi-Fi password and decides to rearrange your furniture without asking—what a chaotic surprise! This vulnerability allows attackers to send their own commands, similar to giving that friend a spare key without considering the consequences. This vulnerability stems from insufficient input validation in the System Checks function, allowing attackers to inject malicious commands that the system will execute with the same privileges as the device's operating system.

What to do

An attacker could exploit this flaw to execute arbitrary commands on your device, potentially allowing them to steal sensitive information, alter settings, or even turn your network against you! This isn't just a minor inconvenience; it could lead to a full-blown security breach. To protect yourself, update your D-Link DHP-W310AV to the latest firmware version immediately. Additionally, review your network settings and consider changing default credentials if you haven't already. You've got this! Follow these steps and secure your device like a pro! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02555 · 84.9th percentile
Published
2022-12-02T00:00Z
EPSS history
Timeline
  • 02 DEC 00:00Z
    D-Link DHP-W310AV 3.10EU was discovered to contain a command injection vulnerability via the System Checks function
    cvelistv5