Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2022-40946

Description

On D-Link DIR-819 Firmware Version 1.06 Hardware Version A1 devices, it is possible to trigger a Denial of Service via the sys_token parameter in a cgi-bin/webproc?getpage=html/index.html request.

POC

Reference

- http://packetstormsecurity.com/files/171484/D-Link-DIR-819-A1-Denial-Of-Service.html

- https://www.dlink.com/en/security-bulletin/

Github

- https://github.com/whokilleddb/dlink-dir-819-dos