CVE-2022-26258

D-Link DIR-820L Remote Code Execution Vulnerability
91.6%
EPSS
100%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter in /lan.asp which allows for remote code execution.

Vendor
D-Link
Product
DIR-820L
Added to KEV
Sep 8, 2022
Remediation due
Sep 29, 2022 (US federal deadline)
Ransomware use
Not known
Weakness
CWE-78
EPSS
91.6% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded