CVE-2021-44880: D-Link Dir-878 Firmware

Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days.

D-Link devices DIR_878 DIR_878_FW1.30B08_Hotfix_02 and DIR_882 DIR_882_FW1.30B06_Hotfix_02 were discovered to contain a command injection vulnerability in the system function. This vulnerability allows attackers to execute arbitrary commands via a crafted HNAP1 POST request.

Affected products

• D-Link Dir-878 Firmware: up to and including 1.20b05; version 1.30b08 only
• D-Link Dir-882 Firmware: up to and including 1.30b06; version 1.30b06 only

Published 2022-02-04. Last modified 2026-06-17.