DF
Product
Dir-882 Firmware
31
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 18Medium 3Low 0
Watch
Add Dir-882 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-44807 | 9.8 | Nov 22 | D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow via webGetVarString Affected: 1.10b02; 1.20b06 |
| CVE-2022-44806 | 9.8 | Nov 22 | D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow Affected: 1.10b02; 1.20b06 |
| CVE-2022-44804 | 9.8 | Nov 22 | D-Link DIR-882 1.10B02 and1.20B06 is vulnerable to Buffer Overflow via the websRedirect function Affected: 1.10b02; 1.20b06 |
| CVE-2022-28901 | 9.8 | May 10 | A command injection vulnerability in the component /SetTriggerLEDBlink/Blink of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privileges to root via a crafted… Affected: 1.30b06 |
| CVE-2022-28896 | 9.8 | May 10 | A command injection vulnerability in the component /setnetworksettings/SubnetMask of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privileges to root via a crafted… Affected: 1.30b06 |
| CVE-2022-28895 | 9.8 | May 10 | A command injection vulnerability in the component /setnetworksettings/IPAddress of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privileges to root via a crafted… Affected: 1.30b06 |
| CVE-2022-28571 | 9.8 | May 2 | D-link 882 DIR882A1_FW130B06 was discovered to contain a command injection vulnerability in`/usr/bin/cli Affected: 1.30b06 |
| CVE-2021-45998 | 9.8 | Feb 4 | D-Link device DIR_882 DIR_882_FW1.30B06_Hotfix_02 was discovered to contain a command injection vulnerability in the LocalIPAddress parameter Affected: through 1.30b06; 1.30b06 |
| CVE-2021-44881 | 9.8 | Feb 4 | D-Link device DIR_882 DIR_882_FW1.30B06_Hotfix_02 was discovered to contain a command injection vulnerability in the twsystem function Affected: through 1.30b06; 1.30b06 |
| CVE-2021-44880 | 9.8 | Feb 4 | D-Link devices DIR_878 DIR_878_FW1.30B08_Hotfix_02 and DIR_882 DIR_882_FW1.30B06_Hotfix_02 were discovered to contain a command injection vulnerability in the system function Affected: through 1.30b06; 1.30b06 |
| CVE-2023-24330 | 8.8 | Feb 21 | Command Injection vulnerability in D-Link Dir 882 with firmware version DIR882A1_FW130B06 allows attackers to run arbitrary commands via crafted POST request to /HNAP1/ Affected: 1.30b06 |
| CVE-2020-8864 | 8.8 | Mar 23 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04 Affected: through 1.10b04 |
| CVE-2020-8863 | 8.8 | Mar 23 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04 Affected: through 1.10b04 |
| CVE-2024-48638 | 8.0 | Oct 17 | D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the SubnetMask parameter in the SetGuestZoneRouterSettings… Affected: 1.30b06 |
| CVE-2024-48637 | 8.0 | Oct 17 | D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the VLANID:1/VID parameter in the SetVLANSettings function Affected: 1.30b06 |
| CVE-2024-48636 | 8.0 | Oct 17 | D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the VLANID:0/VID parameter in the SetVLANSettings function Affected: 1.30b06 |
| CVE-2024-48635 | 8.0 | Oct 17 | D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the VLANID:2/VID parameter in the SetVLANSettings function Affected: 1.30b06 |
| CVE-2024-48634 | 8.0 | Oct 17 | D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the key parameter in the SetWLanRadioSecurity function Affected: 1.30b06 |
| CVE-2024-48633 | 8.0 | Oct 17 | D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain multiple command injection vulnerabilities via the ExternalPort, InternalPort, ProtocolNumber, and… Affected: 1.30b06 |
| CVE-2024-48632 | 8.0 | Oct 17 | D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain multiple command injection vulnerabilities via the LocalIPAddress, TCPPorts, and UDPPorts… Affected: 1.30b06 |
| CVE-2024-48631 | 8.0 | Oct 17 | D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the SSID parameter in the SetWLanRadioSettings function Affected: 1.30b06 |
| CVE-2024-48630 | 8.0 | Oct 17 | D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the MacAddress parameter in the SetMACFilters2 function Affected: 1.30b06 |
| CVE-2024-48629 | 8.0 | Oct 17 | D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the IPAddress parameter in the SetGuestZoneRouterSettings… Affected: 1.30b06 |
| CVE-2022-1262 | 7.8 | Apr 11 | A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary commands as root Affected: 1.20b06; 1.30b06; 1.30b10 |
| CVE-2023-26925 | 7.5 | Mar 31 | An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-882 1.30 Affected: 1.30 |
| CVE-2025-60698 | 7.3 | Nov 13 | A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02 within the `prog.cgi` and `rc` binaries Affected: 1.02b02 |
| CVE-2025-60697 | 7.3 | Nov 13 | A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02 within the `prog.cgi` and `rc` binaries Affected: 1.02b02 |
| CVE-2026-5844 | 7.2 | Apr 9 | D-Link DIR-882 HNAP1 SetNetworkSettings prog.cgi sprintf os command injection Affected: 1.01b02 |
| CVE-2025-60701 | 6.5 | Nov 13 | A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02 within the `prog.cgi` and `rc` binaries Affected: 1.02b02 |
| CVE-2025-60700 | 6.5 | Nov 13 | A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02 within the `prog.cgi` and `librcm.so` binaries Affected: 1.02b02 |
| CVE-2024-0717 | 5.3 | Jan 19 | A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S,… Affected: through 2024-01-12 |
Showing 31
