Skip to main content

Dvg G5402Sp Firmware

2 CVEs product

Monthly

CVE-2022-44929 Dec 02, 03:15 CRITICAL POC Act Now

An access control issue in D-Link DVG-G5402SP GE_1.03 allows unauthenticated attackers to escalate privileges via arbitrarily editing VoIP SIB profiles. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Privilege Escalation D-Link Dvg G5402Sp Firmware D-Link
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-44928 Dec 02, 02:15 CRITICAL POC Act Now

D-Link DVG-G5402SP GE_1.03 was discovered to contain a command injection vulnerability via the Maintenance function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection D-Link Dvg G5402Sp Firmware D-Link
NVD
CVSS 3.1
9.8
EPSS
2.7%
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

An access control issue in D-Link DVG-G5402SP GE_1.03 allows unauthenticated attackers to escalate privileges via arbitrarily editing VoIP SIB profiles. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Privilege Escalation D-Link Dvg G5402Sp Firmware +1
NVD
EPSS 3% CVSS 9.8
CRITICAL POC Act Now

D-Link DVG-G5402SP GE_1.03 was discovered to contain a command injection vulnerability via the Maintenance function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection D-Link Dvg G5402Sp Firmware +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy