CVE-2022-37133: D-Link Dir-816 Firmware

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

D-link DIR-816 A2_v1.10CNB04.img reboots the router without authentication via /goform/doReboot. No authentication is required, and reboot is executed when the function returns at the end.

Affected products

• D-Link Dir-816 Firmware: version 1.10cnb04 only

Published 2022-08-22. Last modified 2026-06-17.