critical9.8
CVE-2022-48107
D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability via the component /setnetworksettings/IPAddress.
Impact
D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability via the component /setnetworksettings/IPAddress. This vulnerability allows attackers to escalate privileges to root via a crafted payload.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dlink | Dir 878 Firmware | Version 1.30b08 |