CVE-2022-1262: D-Link Dir-1360 Firmware

High severity, CVSS 7.8. EPSS: 2.2% chance of exploitation in the next 30 days.

A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary commands as root.

Affected products

• D-Link Dir-1360 Firmware: version 1.02b03 only; version 1.03b02 only; version 1.11b04 only; version 1.00b15 only; version 1.01b03 only
• D-Link Dir-1760 Firmware: version 1.01b04 only; version 1.11b03 only
• D-Link Dir-1960 Firmware: version 1.02b01 only; version 1.03b03 only; version 1.11b03 only
• D-Link Dir-2640 Firmware: version 1.11b02 only; version 1.01b04 only
• D-Link Dir-2660 Firmware: version 1.04b03 only; version 1.11b04 only; version 1.00b14 only; version 1.01b03 only; version 1.02b01 only; version 1.03b04 only
• D-Link Dir-3040 Firmware: version 1.13b03 only; version 1.11b02 only; version 1.12b01 only; version 1.20b03 only
• D-Link Dir-3060 Firmware: version 1.00b12 only; version 1.11b04 only; version 1.01b07 only; version 1.02b03 only; version 1.11b02 only
• D-Link Dir-867 Firmware: version 1.20b10 only; version 1.10b04 only; version 1.30b07 only
• D-Link Dir-878 Firmware: version 1.20b05 only; version 1.30b08 only
• D-Link Dir-882 Firmware: version 1.20b06 only; version 1.30b06 only; version 1.30b10 only

Published 2022-04-11. Last modified 2026-06-17.