Lucene search

[email protected]CVE-2022-37128

HistoryAug 31, 2022 - 7:15 p.m.

CVE-2022-37128

2022-08-3119:15:08

CWE-665

[email protected]

web.nvd.nist.gov

cve-2022-37128

d-link

network security

authentication bypass

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.6%

JSON

In D-Link DIR-816 A2_v1.10CNB04.img the network can be initialized without authentication via /goform/wizard_end.

Affected configurations

NVD

Node

dlinkdir-816_firmwareMatch1.10cnb04

AND

dlinkdir-816Matcha2

CPENameOperatorVersion
dlink:dir-816_firmwaredlink dir-816 firmwareeq1.10cnb04

CPE	Name	Operator	Version
dlink:dir-816_firmware	dlink dir-816 firmware	eq	1.10cnb04

References

github.com/z1r00/IOT_Vul/blob/main/dlink/Dir816/wizard_end/readme.md

www.dlink.com/en/security-bulletin/

Social References

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.6%

JSON

Related for CVE-2022-37128

prion1 nvd1 cvelist1