← Database

CVE-2022-28896

CRITICAL CVSS: 9.8 Published: 2022-05-10 Modified: 2026-06-17

Description

A command injection vulnerability in the component /setnetworksettings/SubnetMask of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privileges to root via a crafted payload.

Affected Platforms

Dlink Dir-882Dlink Dir-882 Firmware

Weakness Type

CWE-78

References