Denial of Service Vulnerability in D-Link DIR-819 Router Firmware
CVE-2022-40946

7.5HIGH

Key Information:

Vendor

D-Link
Status
Dir-819 Firmware
Vendor
CVE Published:
16 April 2023

What is CVE-2022-40946?

The D-Link DIR-819, specifically firmware version 1.06 on hardware version A1, is susceptible to a Denial of Service attack. An attacker can exploit this vulnerability by manipulating the sys_token parameter in a cgi-bin/webproc?getpage=html/index.html request. This can potentially render the device unresponsive, disrupting network connectivity and services for users.

References

https://www.dlink.com/en/security-bulletin/
https://github.com/whokilleddb/dlink-dir-819-dos
http://packetstormsecurity.com/files/171484/D-Link-DIR-81...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.