Command Injection Vulnerability in D-Link DIR-816 Router

CVE-2022-42999

Summary

The D-Link DIR-816 A2 1.10 B05 router is susceptible to command injection attacks through the admuser and admpass parameters found in the /goform/setSysAdm interface. This vulnerability allows malicious actors to execute arbitrary commands on the device, potentially leading to unauthorized access and significant compromises to network security. It is crucial for users to apply the recommended security updates to mitigate these risks and enhance the security posture of their networking equipment.

References