← KEV catalog
CISA known exploited vulnerability

CVE-2022-26258

D-Link DIR-820L Remote Code Execution Vulnerability

SOURCE FACT

D-Link · DIR-820L

D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter in /lan.asp which allows for remote code execution.

Required action

The impacted product is end-of-life and should be disconnected if still in use.

CISA notes

https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10295; https://nvd.nist.gov/vuln/detail/CVE-2022-26258

View source evidence →

CHECK YOUR OUTSIDE-IN INVENTORY

Could this product be present?