NetSight
high7.8

CVE-2022-1262

A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary commands as ro…

Impact

A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary commands as root.

Affected products

VendorProductAffected versions
DlinkDir-1360 Firmware
Versions 1.02b03, 1.03b02, 1.11b04, 1.00b15, 1.01b03
DlinkDir-1760 Firmware
Versions 1.01b04, 1.11b03
DlinkDir-1960 Firmware
Versions 1.02b01, 1.03b03, 1.11b03
DlinkDir-2640 Firmware
Versions 1.11b02, 1.01b04
DlinkDir-2660 Firmware
Versions 1.04b03, 1.11b04, 1.00b14, 1.01b03, 1.02b01, 1.03b04
DlinkDir-3040 Firmware
Versions 1.13b03, 1.11b02, 1.12b01, 1.20b03
DlinkDir-3060 Firmware
Versions 1.00b12, 1.11b04, 1.01b07, 1.02b03, 1.11b02
DlinkDir-867 Firmware
Versions 1.20b10, 1.10b04, 1.30b07
DlinkDir-878 Firmware
Versions 1.20b05, 1.30b08
DlinkDir-882 Firmware
Versions 1.20b06, 1.30b06, 1.30b10

Weakness classification

References