Read the docs
TI-2022-01147 Aliases CVE-2022-1262GHSA-q6c3-c7qx-wh5h

OS command injection in D-Link Routers

Priority LOW 38CWE-78Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-78.

Summary

A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary commands as root.

Why it matters now

EPSS 0.02211 82nd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—D-Link Routersall versions—No fix listedCNA
  • D-Link Routers Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 59

CPEVersionsRoleVendor
cpe:2.3:o:dlink:dir-1360_firmware:1.02b03:*:*:*:*:*:*:*1.02b03VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dir-1360_firmware:1.03b02:*:*:*:*:*:*:*1.03b02VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dir-1360_firmware:1.11b04:*:*:*:*:*:*:*1.11b04VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dir-1360:a1:*:*:*:*:*:*:*a1Running onD-Link Japan K.K.
cpe:2.3:o:dlink:dir-1760_firmware:1.01b04:*:*:*:*:*:*:*1.01b04VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dir-1760_firmware:1.11b03:beta:*:*:*:*:*:*1.11b03 betaVulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dir-1760:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dir-1960_firmware:1.02b01:*:*:*:*:*:*:*1.02b01VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dir-1960_firmware:1.03b03:*:*:*:*:*:*:*1.03b03VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dir-1960_firmware:1.11b03:*:*:*:*:*:*:*1.11b03VulnerableD-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-1360_firmware:1.02b03:*:*:*:*:*:*:* Versions 1.02b03 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-1360_firmware:1.03b02:*:*:*:*:*:*:* Versions 1.03b02 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-1360_firmware:1.11b04:*:*:*:*:*:*:* Versions 1.11b04 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dir-1360:a1:*:*:*:*:*:*:* Versions a1 Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-1760_firmware:1.01b04:*:*:*:*:*:*:* Versions 1.01b04 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-1760_firmware:1.11b03:beta:*:*:*:*:*:* Versions 1.11b03 beta Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dir-1760:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-1960_firmware:1.02b01:*:*:*:*:*:*:* Versions 1.02b01 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-1960_firmware:1.03b03:*:*:*:*:*:*:* Versions 1.03b03 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-1960_firmware:1.11b03:*:*:*:*:*:*:* Versions 1.11b03 Vulnerable ·D-Link Japan K.K.
Show 49 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:dlink:dir-1960:a1:*:*:*:*:*:*:*a1Running onD-Link Japan K.K.
cpe:2.3:o:dlink:dir-2640_firmware:1.11b02:beta:*:*:*:*:*:*1.11b02 betaVulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dir-2640:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dir-2660_firmware:1.04b03:*:*:*:*:*:*:*1.04b03VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dir-2660_firmware:1.11b04:*:*:*:*:*:*:*1.11b04VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dir-2660:a1:*:*:*:*:*:*:*a1Running onD-Link Japan K.K.
cpe:2.3:o:dlink:dir-3040_firmware:1.13b03:beta:*:*:*:*:*:*1.13b03 betaVulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dir-3040:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dir-3060_firmware:1.00b12:*:*:*:*:*:*:*1.00b12VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dir-3060_firmware:1.11b04:beta:*:*:*:*:*:*1.11b04 betaVulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dir-3060:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dir-867_firmware:1.20b10:*:*:*:*:*:*:*1.20b10VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dir-867:a1:*:*:*:*:*:*:*a1Running onD-Link Japan K.K.
cpe:2.3:o:dlink:dir-878_firmware:1.20b05:*:*:*:*:*:*:*1.20b05VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dir-878_firmware:1.30b08:*:*:*:*:*:*:*1.30b08VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dir-878:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dir-882_firmware:1.20b06:*:*:*:*:*:*:*1.20b06VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dir-882:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dir-1360_firmware:1.00b15:*:*:*:*:*:*:*1.00b15VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dir-1360_firmware:1.01b03:*:*:*:*:*:*:*1.01b03VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dir-1360_firmware:1.11b04:beta:*:*:*:*:*:*1.11b04 betaVulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dir-1360:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dir-1960_firmware:1.11b03:beta:*:*:*:*:*:*1.11b03 betaVulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dir-1960:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dir-2640_firmware:1.01b04:*:*:*:*:*:*:*1.01b04VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dir-2640_firmware:1.11b02:*:*:*:*:*:*:*1.11b02VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dir-2640:a1:*:*:*:*:*:*:*a1Running onD-Link Japan K.K.
cpe:2.3:o:dlink:dir-2660_firmware:1.00b14:*:*:*:*:*:*:*1.00b14VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dir-2660_firmware:1.01b03:*:*:*:*:*:*:*1.01b03VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dir-2660_firmware:1.02b01:*:*:*:*:*:*:*1.02b01VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dir-2660_firmware:1.03b04:*:*:*:*:*:*:*1.03b04VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dir-2660_firmware:1.11b04:beta:*:*:*:*:*:*1.11b04 betaVulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dir-2660:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dir-3040_firmware:1.11b02:*:*:*:*:*:*:*1.11b02VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dir-3040_firmware:1.12b01:*:*:*:*:*:*:*1.12b01VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dir-3040_firmware:1.13b03:*:*:*:*:*:*:*1.13b03VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dir-3040_firmware:1.20b03:*:*:*:*:*:*:*1.20b03VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dir-3040:a1:*:*:*:*:*:*:*a1Running onD-Link Japan K.K.
cpe:2.3:o:dlink:dir-3060_firmware:1.01b07:*:*:*:*:*:*:*1.01b07VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dir-3060_firmware:1.02b03:*:*:*:*:*:*:*1.02b03VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dir-3060_firmware:1.11b02:*:*:*:*:*:*:*1.11b02VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dir-3060_firmware:1.11b04:*:*:*:*:*:*:*1.11b04VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dir-3060:a1:*:*:*:*:*:*:*a1Running onD-Link Japan K.K.
cpe:2.3:o:dlink:dir-867_firmware:1.10b04:*:*:*:*:*:*:*1.10b04VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dir-867_firmware:1.30b07:*:*:*:*:*:*:*1.30b07VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dir-867:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dir-882_firmware:1.30b06:*:*:*:*:*:*:*1.30b06VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dir-882_firmware:1.30b10:*:*:*:*:*:*:*1.30b10VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dir-882:a1:*:*:*:*:*:*:*a1Running onD-Link Japan K.K.
  • cpe:2.3:h:dlink:dir-1960:a1:*:*:*:*:*:*:* Versions a1 Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-2640_firmware:1.11b02:beta:*:*:*:*:*:* Versions 1.11b02 beta Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dir-2640:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-2660_firmware:1.04b03:*:*:*:*:*:*:* Versions 1.04b03 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-2660_firmware:1.11b04:*:*:*:*:*:*:* Versions 1.11b04 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dir-2660:a1:*:*:*:*:*:*:* Versions a1 Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-3040_firmware:1.13b03:beta:*:*:*:*:*:* Versions 1.13b03 beta Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dir-3040:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-3060_firmware:1.00b12:*:*:*:*:*:*:* Versions 1.00b12 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-3060_firmware:1.11b04:beta:*:*:*:*:*:* Versions 1.11b04 beta Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dir-3060:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-867_firmware:1.20b10:*:*:*:*:*:*:* Versions 1.20b10 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dir-867:a1:*:*:*:*:*:*:* Versions a1 Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-878_firmware:1.20b05:*:*:*:*:*:*:* Versions 1.20b05 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-878_firmware:1.30b08:*:*:*:*:*:*:* Versions 1.30b08 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dir-878:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-882_firmware:1.20b06:*:*:*:*:*:*:* Versions 1.20b06 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dir-882:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-1360_firmware:1.00b15:*:*:*:*:*:*:* Versions 1.00b15 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-1360_firmware:1.01b03:*:*:*:*:*:*:* Versions 1.01b03 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-1360_firmware:1.11b04:beta:*:*:*:*:*:* Versions 1.11b04 beta Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dir-1360:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-1960_firmware:1.11b03:beta:*:*:*:*:*:* Versions 1.11b03 beta Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dir-1960:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-2640_firmware:1.01b04:*:*:*:*:*:*:* Versions 1.01b04 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-2640_firmware:1.11b02:*:*:*:*:*:*:* Versions 1.11b02 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dir-2640:a1:*:*:*:*:*:*:* Versions a1 Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-2660_firmware:1.00b14:*:*:*:*:*:*:* Versions 1.00b14 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-2660_firmware:1.01b03:*:*:*:*:*:*:* Versions 1.01b03 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-2660_firmware:1.02b01:*:*:*:*:*:*:* Versions 1.02b01 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-2660_firmware:1.03b04:*:*:*:*:*:*:* Versions 1.03b04 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-2660_firmware:1.11b04:beta:*:*:*:*:*:* Versions 1.11b04 beta Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dir-2660:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-3040_firmware:1.11b02:*:*:*:*:*:*:* Versions 1.11b02 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-3040_firmware:1.12b01:*:*:*:*:*:*:* Versions 1.12b01 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-3040_firmware:1.13b03:*:*:*:*:*:*:* Versions 1.13b03 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-3040_firmware:1.20b03:*:*:*:*:*:*:* Versions 1.20b03 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dir-3040:a1:*:*:*:*:*:*:* Versions a1 Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-3060_firmware:1.01b07:*:*:*:*:*:*:* Versions 1.01b07 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-3060_firmware:1.02b03:*:*:*:*:*:*:* Versions 1.02b03 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-3060_firmware:1.11b02:*:*:*:*:*:*:* Versions 1.11b02 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-3060_firmware:1.11b04:*:*:*:*:*:*:* Versions 1.11b04 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dir-3060:a1:*:*:*:*:*:*:* Versions a1 Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-867_firmware:1.10b04:*:*:*:*:*:*:* Versions 1.10b04 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-867_firmware:1.30b07:*:*:*:*:*:*:* Versions 1.30b07 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dir-867:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-882_firmware:1.30b06:*:*:*:*:*:*:* Versions 1.30b06 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-882_firmware:1.30b10:*:*:*:*:*:*:* Versions 1.30b10 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dir-882:a1:*:*:*:*:*:*:* Versions a1 Running on ·D-Link Japan K.K.

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-1262
  2. 2026-10-03 Alias added: GHSA-q6c3-c7qx-wh5h

References

Exploit 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences