CVE-2022-26258

CVE-2022-26258

NVD Published Date: March 28, 2022 at 12:15 AM

NVD Last Modified: June 28, 2024 at 02:04 PM

Download Patch

Vulnerability ID

CVE-2022-26258

Severity

CRITICAL

Severity Score

9.8

Summary

D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.

References

https://www.dlink.com/en/security-bulletin/

http://dir-820l.com

http://dlink.com

https://github.com/skyedai910/Vuln/tree/master/DIR-820L/command_execution_0

https://github.com/zhizhuoshuma/cve_info_data/blob/ccaed4b94ba762eb8a8e003bfa762a7754b8182e/Vuln/Vuln/DIR-820L/command_execution_0/README.md

Mitigation and Patches

-

Exploits

https://github.com/skyedai910/Vuln/tree/master/DIR-820L/command_execution_0

https://www.cisa.gov/known-exploited-vulnerabilities-catalog

https://unit42.paloaltonetworks.com/moobot-d-link-devices/

https://github.com/zhizhuoshuma/cve_info_data/blob/ccaed4b94ba762eb8a8e003bfa762a7754b8182e/Vuln/Vuln/DIR-820L/command_execution_0/README.md

Metasploit Payload

-

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE ID

CWE-78

Recent Publish

CVE-2022-26871

CVE-2022-22965

CVE-2024-8367

CVE-2024-8368

CVE-2024-5053

2024-01 Security and Quality Rollup for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded Standard 7 (KB5034277)

See SecOps Solution
in action

Schedule Demo

Agentless security for your infrastructure and applications - to build faster, more securely and in a fraction of the operational cost of other solutions