D Link · D-Link Dir-878 · CVE-2022-43184
**Name of the Vulnerable Software and Affected Versions**
D-Link DIR878 version 1.30B08 Hotfix 04
**Description**
The issue is related to a command injection vulnerability via the component /bin/proc.cgi. This vulnerability may allow a remote attacker to execute arbitrary code. The /bin/proc.cgi component is the vulnerable endpoint.
**Recommendations**
For D-Link DIR878 version 1.30B08 Hotfix 04, consider restricting access to the /bin/proc.cgi endpoint until a patch is available. As a temporary workaround, avoid using the /bin/proc.cgi endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.