D-Link Dir-3060 Firmware vulnerabilities

3 CVEs affecting D-Link Dir-3060 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-44204, published 2022-11-18.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-28144, published 2021-03-11. High severity, CVSS 8.8. EPSS: 6% chance of exploitation in the next 30 days. prog.cgi on D-Link DIR-3060 devices before 1.11b04 HF2 allows remote authenticated users to inject arbitrary commands in an admin or root context because SetVirtualServerSettings calls…
• CVE-2022-1262, published 2022-04-11. High severity, CVSS 7.8. EPSS: 2.2% chance of exploitation in the next 30 days. A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary commands as root.
• CVE-2022-44204, published 2022-11-18. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. D-Link DIR3060 DIR3060A1_FW111B04.bin is vulnerable to Buffer Overflow.