CVE-2022-35619
Published: 03 August 2022
Summary
CVE-2022-35619 is a critical-severity an unspecified weakness vulnerability in Dlink Dir-818L Firmware. Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 8.8% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
The vulnerability CVE-2022-35619 is a remote code execution flaw present in the D-Link DIR-818LW A1 router running firmware version DIR818L_FW105b01. It is triggered through the ssdpcgi_main function and is rated 9.8 under CVSS 3.1, reflecting network attackability without credentials or user interaction.
An unauthenticated remote attacker can send crafted requests to the affected device to execute arbitrary code, resulting in complete control over the router and impacts to confidentiality, integrity, and availability.
D-Link references a security bulletin on its site for this and related issues, directing users to vendor guidance for mitigation steps.
The associated EPSS score has remained flat at 0.0632 with no material rise observed after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-38501
Vulnerability details
D-LINK DIR-818LW A1:DIR818L_FW105b01 was discovered to contain a remote code execution (RCE) vulnerability via the function ssdpcgi_main.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.