D-Link Dir-819 Firmware vulnerabilities

2 CVEs affecting D-Link Dir-819 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-40946, published 2023-04-16.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-40946, published 2023-04-16. High severity, CVSS 7.5. EPSS: 7.5% chance of exploitation in the next 30 days. On D-Link DIR-819 Firmware Version 1.06 Hardware Version A1 devices, it is possible to trigger a Denial of Service via the sys_token parameter in a cgi-bin/webproc?getpage=html/index.html request.
• CVE-2022-38258, published 2022-09-08. High severity, CVSS 8.1. EPSS: 1.4% chance of exploitation in the next 30 days. A local file inclusion (LFI) vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service (DoS) or access sensitive server information via manipulation of the getpage parameter…