CVE-2022-42160: D-Link Covr 1200 Firmware

High severity, CVSS 8.8. EPSS: 2.7% chance of exploitation in the next 30 days.

D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the system_time_timezone parameter at function SetNTPServerSettings.

Affected products

• D-Link Covr 1200 Firmware: version 1.08 only
• D-Link Covr 1202 Firmware: version 1.08 only
• D-Link Covr 1203 Firmware: version 1.08 only

Published 2022-10-13. Last modified 2026-06-17.