D-Link Covr 1202 Firmware vulnerabilities

4 CVEs affecting D-Link Covr 1202 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-42161, published 2022-10-13.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-42161, published 2022-10-13. High severity, CVSS 8.8. EPSS: 2.7% chance of exploitation in the next 30 days. D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the /SetTriggerWPS/PIN parameter at function SetTriggerWPS.
• CVE-2022-42156, published 2022-10-13. High severity, CVSS 8.8. EPSS: 2.7% chance of exploitation in the next 30 days. D-Link COVR 1200,1203 v1.08 was discovered to contain a command injection vulnerability via the tomography_ping_number parameter at function SetNetworkTomographySettings.
• CVE-2022-42160, published 2022-10-13. High severity, CVSS 8.8. EPSS: 2.7% chance of exploitation in the next 30 days. D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the system_time_timezone parameter at function SetNTPServerSettings.
• CVE-2022-42159, published 2022-10-13. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. D-Link COVR 1200,1202,1203 v1.08 was discovered to have a predictable seed in a Pseudo-Random Number Generator.