CVE-2022-1262 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.8 HIGH	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
tenable	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 60%

Vendor	Product	Version
dlink	dir-1360_firmware	1.02b03:b03
dlink	dir-1360_firmware	1.03b02:b02
dlink	dir-1360_firmware	1.11b04:b04
dlink	dir-1760_firmware	1.01b04:b04
dlink	dir-1760_firmware	1.11b03:b03
dlink	dir-1960_firmware	1.02b01:b01
dlink	dir-1960_firmware	1.03b03:b03
dlink	dir-1960_firmware	1.11b03:b03
dlink	dir-2640_firmware	1.11b02:b02
dlink	dir-2660_firmware	1.04b03:b03
dlink	dir-2660_firmware	1.11b04:b04
dlink	dir-3040_firmware	1.13b03:b03
dlink	dir-3060_firmware	1.00b12:b12
dlink	dir-3060_firmware	1.11b04:b04
dlink	dir-867_firmware	1.20b10:b10
dlink	dir-878_firmware	1.20b05:b05
dlink	dir-878_firmware	1.30b08:b08
dlink	dir-882_firmware	1.20b06:b06
dlink	dir-1360_firmware	1.00b15:b15
dlink	dir-1360_firmware	1.01b03:b03
dlink	dir-1360_firmware	1.11b04:b04
dlink	dir-1960_firmware	1.11b03:b03
dlink	dir-2640_firmware	1.01b04:b04
dlink	dir-2640_firmware	1.11b02:b02
dlink	dir-2660_firmware	1.00b14:b14
dlink	dir-2660_firmware	1.01b03:b03
dlink	dir-2660_firmware	1.02b01:b01
dlink	dir-2660_firmware	1.03b04:b04
dlink	dir-2660_firmware	1.11b04:b04
dlink	dir-3040_firmware	1.11b02:b02
dlink	dir-3040_firmware	1.12b01:b01
dlink	dir-3040_firmware	1.13b03:b03
dlink	dir-3040_firmware	1.20b03:b03
dlink	dir-3060_firmware	1.01b07:b07
dlink	dir-3060_firmware	1.02b03:b03
dlink	dir-3060_firmware	1.11b02:b02
dlink	dir-3060_firmware	1.11b04:b04
dlink	dir-867_firmware	1.10b04:b04
dlink	dir-867_firmware	1.30b07:b07
dlink	dir-882_firmware	1.30b06:b06
dlink	dir-882_firmware	1.30b10:b10

𝑥

= Vulnerable software versions

Known Exploits!

Common Weakness Enumeration

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The software constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References

https://www.tenable.com/security/research/tra-2022-09

https://www.tenable.com/security/research/tra-2022-09