Dlink Dir-822+ Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Dlink Dir-822+ Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2024-33344 — CVSS 9.8 (critical): D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of upload_firmware.cgi, which allows remote attackers to…
• CVE-2024-33343 — CVSS 8.8 (high): D-Link DIR-822+ V1.0.5 was found to contain a command injection in ChgSambaUserSettings function of prog.cgi, which allows remote attackers…
• CVE-2024-33342 — CVSS 7.5 (high): D-Link DIR-822+ V1.0.5 was found to contain a command injection in SetPlcNetworkpwd function of prog.cgi, which allows remote attackers to…
• CVE-2024-34950 — CVSS 7.5 (high): D-Link DIR-822+ v1.0.5 was discovered to contain a stack-based buffer overflow vulnerability in the SetNetworkTomographySettings module.