D-Link Dir-1960 Firmware vulnerabilities

2 CVEs affecting D-Link Dir-1960 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-31414, published 2022-09-07.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-1262, published 2022-04-11. High severity, CVSS 7.8. EPSS: 2.2% chance of exploitation in the next 30 days. A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary commands as root.
• CVE-2022-31414, published 2022-09-07. High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days. D-Link DIR-1960 firmware DIR-1960_A1_1.11 was discovered to contain a buffer overflow via srtcat in prog.cgi. This vulnerability allowed attackers to cause a Denial of Service (DoS) via a crafted…