PT-2022-5798 · D Link · D-Link Dir-823G

Published 2022-11-07 · Updated 2025-04-25 · CVE-2022-44808

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G version 1.02B03

Description A command injection vulnerability has been found that allows an attacker to execute arbitrary operating system commands through well-designed /HNAP1 requests. Before the HNAP API function can process the request, the system function executes an untrusted command that triggers the vulnerability. This issue exists due to the lack of measures to neutralize special elements used in the operating system command.

Recommendations For D-Link DIR-823G version 1.02B03, as a temporary workaround, consider restricting access to the /HNAP1 API endpoint until a patch is available. Avoid using the HNAP API function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2022-07198

CVE-2022-44808

Affected Products

D-Link Dir-823G

References · 12

• 🔥❌ https://github.com/RobinWang825/IoT_vuln/tree/main/D-Link/DIR-823G/2 · Exploit, Deleted
• https://dlink.com/en/security-bulletin · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-07198 · Security Note
• https://osv.dev/vulnerability/CVE-2022-44808 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-44808 · Security Note
• https://github.com/726232111/VulIoT/tree/main/D-Link/DIR823G%20V1.0.2B05/HNAP1 · Note
• https://twitter.com/ExCraft_labs/status/1759591501368000656 · Twitter Post
• https://t.me/cvenotify/119874 · Telegram Post
• https://t.me/cvenotify/38222 · Telegram Post
• https://github.com/advisories/GHSA-qvj8-qcrx-49c6 · Note
• https://t.me/cibsecurity/53358 · Telegram Post
• https://vuldb.com/?id.214187 · Note