DSL-224 vulnerabilities

1 known vulnerability in DSL-224 from D-Link. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.9 Critical severity

  DSL-224: Improper Neutralization of Special Elements used in a Command

  CVE-2022-36786Nov 17, 2022D-LinkEPSS 1.03%

  DLINK - DSL-224 Post-auth RCE. DLINK router version 3.0.8 has an interface where you can configure NTP servers (Network Time Protocol) via jsonrpc API. It is possible to inject a command through this interface that will run with ROOT permissions on the router.