CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-26670

D-Link DIR-878 has inadequate filtering for special characters in the webpage input field. An unauthenticated LAN attacker can perform command injection attack to execute arbitrary system commands to control the system or disrupt service.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.058

EPSS Ranking 90.0%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 8.3

References

Products affected by CVE-2022-26670

Dlink » Dir-878 » Version: N/A

cpe:2.3:h:dlink:dir-878:-
Dlink » Dir-878 Firmware » Version: N/A

cpe:2.3:o:dlink:dir-878_firmware:-
Dlink » Dir-878 Firmware » Version: 1.01b04

cpe:2.3:o:dlink:dir-878_firmware:1.01b04
Dlink » Dir-878 Firmware » Version: 1.02b04

cpe:2.3:o:dlink:dir-878_firmware:1.02b04
Dlink » Dir-878 Firmware » Version: 1.02b05

cpe:2.3:o:dlink:dir-878_firmware:1.02b05
Dlink » Dir-878 Firmware » Version: 1.10b05

cpe:2.3:o:dlink:dir-878_firmware:1.10b05
Dlink » Dir-878 Firmware » Version: 1.11b02

cpe:2.3:o:dlink:dir-878_firmware:1.11b02
Dlink » Dir-878 Firmware » Version: 1.12a1

cpe:2.3:o:dlink:dir-878_firmware:1.12a1
Dlink » Dir-878 Firmware » Version: 1.12b01

cpe:2.3:o:dlink:dir-878_firmware:1.12b01
Dlink » Dir-878 Firmware » Version: 1.20b03

cpe:2.3:o:dlink:dir-878_firmware:1.20b03
Dlink » Dir-878 Firmware » Version: 1.20b05

cpe:2.3:o:dlink:dir-878_firmware:1.20b05

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-26670

Products

Pricing

Contact Us