← Database

CVE-2021-44880

CRITICAL CVSS: 9.8 Published: 2022-02-04 Modified: 2026-06-17

Description

D-Link devices DIR_878 DIR_878_FW1.30B08_Hotfix_02 and DIR_882 DIR_882_FW1.30B06_Hotfix_02 were discovered to contain a command injection vulnerability in the system function. This vulnerability allows attackers to execute arbitrary commands via a crafted HNAP1 POST request.

Affected Platforms

Dlink Dir-878Dlink Dir-882Dlink Dir-878 FirmwareDlink Dir-882 Firmware

Weakness Type

CWE-77

References