CVE-2022-36756: D-Link Dir-845l Firmware

Critical severity, CVSS 9.8. EPSS: 3.2% chance of exploitation in the next 30 days.

DIR845L A1 v1.00-v1.03 is vulnerable to command injection via /htdocs/upnpinc/gena.php.

Affected products

• D-Link Dir-845l Firmware: from 1.0.0, up to and including 1.0.3

Published 2022-08-28. Last modified 2026-06-17.