← Back to browse · API

CVE-2022-48108

Severity
CRITICAL
CVSS
9.8
EPSS
0.03113
Risk score
40.29
CISA KEV
No
PoC
No
Published
2023-01-27
Modified
2025-03-28
First seen
2026-08-07
Aliases
EUVD-2022-50822, GHSA-4G2V-J3C9-CQX4
Products
n/a:n/a n/a
Sources
euvd EUVD-2022-50822

Description

D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability via the component /SetNetworkSettings/SubnetMask. This vulnerability allows attackers to escalate privileges to root via a crafted payload.

References