Read the docs
TI-2022-17026 Aliases CVE-2022-36785GHSA-gfcp-5456-7q6c

Incorrect authorization in D-Link G integrated Access Device4

Priority MEDIUM 43CWE-863Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-863.

Summary

D-Link – G integrated Access Device4 Information Disclosure & Authorization Bypass. *Information Disclosure – file contains a URL with private IP at line 15 "login.asp" A. The window.location.href = http://192.168.1.1/setupWizard.asp" http://192.168.1.1/setupWizard.asp" ; "admin" – contains default username value "login.asp" B. While accessing the web interface, the login form at *Authorization Bypass – URL by "setupWizard.asp' while it blocks direct access to – the web interface does not properly validate user identity variables values located at the client side, it is available to access it without a "login_glag" and "login_status" checking browser and to read the admin user credentials for the web interface.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0209 81st percentileScored 2026-11-07
Fix Fixed G integrated Access Device4 (D-Link): Upgrade to the latest version.

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
D-LinkG integrated Access Device4All versions to before Upgrade to the latest version. Upgrade to the latest version.Patch availableCNA
  • G integrated Access Device4 VendorD-Link Affected All versions to before Upgrade to the latest version. Fixed in Upgrade to the latest version. Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:dlink:g_integrated_access_device4_firmware:1.0:*:*:*:*:*:*:*1.0VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:g_integrated_access_device4:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
  • cpe:2.3:o:dlink:g_integrated_access_device4_firmware:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:g_integrated_access_device4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.

Remediation

  • Fix · CNA G integrated Access Device4 (D-Link) Fixed in Upgrade to the latest version.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-36785
  2. 2026-10-03 Alias added: GHSA-gfcp-5456-7q6c

References

Advisory 1

  • TI-2024-03070 D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-03069 D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-00708 D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal KEVCVSS 3.1CRITICAL 9.8
  • TI-2023-10693 OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to… KEVCVSS 3.1CRITICAL 9.8
  • TI-2022-17249 D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable… KEVCVSS 3.1CRITICAL 9.8
  • TI-2022-09657 D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE)… KEVCVSS 3.1CRITICAL 9.8
See all 979 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences