CVE-2021-44882: D-Link Dir-878 Firmware

Critical severity, CVSS 9.8. EPSS: 4.5% chance of exploitation in the next 30 days.

D-Link device DIR_878_FW1.30B08_Hotfix_02 was discovered to contain a command injection vulnerability in the twsystem function. This vulnerability allows attackers to execute arbitrary commands via a crafted HNAP1 POST request.

Affected products

• D-Link Dir-878 Firmware: up to and including 1.20b05; version 1.30b08 only

Published 2022-02-04. Last modified 2026-06-17.