CVE-2022-42161: D-Link Covr 1200 Firmware

High severity, CVSS 8.8. EPSS: 2.7% chance of exploitation in the next 30 days.

D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the /SetTriggerWPS/PIN parameter at function SetTriggerWPS.

Affected products

• D-Link Covr 1200 Firmware: version 1.08 only
• D-Link Covr 1202 Firmware: version 1.08 only
• D-Link Covr 1203 Firmware: version 1.08 only

Published 2022-10-13. Last modified 2026-06-17.