PT-2022-2702 · D Link · D-Link Dir-816L

Published 2022-04-11 · Updated 2023-12-07 · CVE-2022-28958

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions D-Link DIR816L versions prior to FW206b01

Description The issue is related to errors in the code of the shareport.php component in the D-Link DIR816L router's firmware. Exploitation of this issue could allow a remote attacker to execute arbitrary code through the value parameter in "shareport.php". However, it has been disputed and officially rejected by the CVE List, indicating that it may not be a valid vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2022-03196

CVE-2022-28958

Affected Products

D-Link Dir-816L

References · 18

• 🔥 https://github.com/shijin0925/IOT/blob/master/DIR816/3.md · Exploit
• 🔥 https://vulncheck.com/blog/moobot-uses-fake-vulnerability · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-28958 · Security Note
• https://bdu.fstec.ru/vul/2022-03196 · Security Note
• https://t.me/pentestingnews/30944 · Telegram Post
• https://t.me/cvenotify/39690 · Telegram Post
• https://twitter.com/GreyNoiseIO/status/1732060693044871262 · Twitter Post
• https://t.me/cibsecurity/42900 · Telegram Post
• https://t.me/aptreports/1597 · Telegram Post
• https://t.me/cvenotify/39510 · Telegram Post
• https://t.me/true_secator/3387 · Telegram Post
• https://t.me/true_secator/3813 · Telegram Post
• https://t.me/aptreports/1590 · Telegram Post
• https://t.me/cybersecuritytechnologies/7317 · Telegram Post
• https://vuldb.com/ru/?id.200303 · Note