D-Link Dvg-g5402sp Firmware vulnerabilities

2 CVEs affecting D-Link Dvg-g5402sp Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-44929, published 2022-12-02.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-44928, published 2022-12-02. Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days. D-Link DVG-G5402SP GE_1.03 was discovered to contain a command injection vulnerability via the Maintenance function.
• CVE-2022-44929, published 2022-12-02. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. An access control issue in D-Link DVG-G5402SP GE_1.03 allows unauthenticated attackers to escalate privileges via arbitrarily editing VoIP SIB profiles.