1. Home
  2. CVE Database
  3. CVE-2022-1262
HIGH · 7.8

CVE-2022-1262

A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary commands as root.

Vulnerability Description

A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary commands as root.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
DlinkDir-1360 Firmware1.02b03
DlinkDir-1360a1
DlinkDir-1760 Firmware1.01b04
DlinkDir-1760-
DlinkDir-1960 Firmware1.02b01
DlinkDir-1960a1
DlinkDir-2640 Firmware1.11b02
DlinkDir-2640-
DlinkDir-2660 Firmware1.04b03
DlinkDir-2660a1
DlinkDir-3040 Firmware1.13b03
DlinkDir-3040-
DlinkDir-3060 Firmware1.00b12
DlinkDir-3060-
DlinkDir-867 Firmware1.20b10
DlinkDir-867a1
DlinkDir-878 Firmware1.20b05
DlinkDir-878-
DlinkDir-882 Firmware1.20b06
DlinkDir-882-

Related Weaknesses (CWE)

CWE-78

References

FAQ

What is CVE-2022-1262?

CVE-2022-1262 is a vulnerability with a CVSS score of 7.8 (HIGH). A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary commands as root.

How severe is CVE-2022-1262?

CVE-2022-1262 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-1262?

Check the references section above for vendor advisories and patch information. Affected products include: Dlink Dir-1360 Firmware, Dlink Dir-1360, Dlink Dir-1760 Firmware, Dlink Dir-1760, Dlink Dir-1960 Firmware.