Dlink Covr 1203 Firmware vulnerabilities

4 known vulnerabilities affecting dlink/covr_1203_firmware.

Total CVEs

4

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH3MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2022-42160HIGHCVSS 8.8v1.082022-10-13

CVE-2022-42160 [HIGH] CWE-77 CVE-2022-42160: D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the system_time_timezone parameter at function SetNTPServerSettings.

CVE-2022-42156HIGHCVSS 8.8v1.082022-10-13

CVE-2022-42156 [HIGH] CWE-77 CVE-2022-42156: D-Link COVR 1200,1203 v1.08 was discovered to contain a command injection vulnerability via the tomo D-Link COVR 1200,1203 v1.08 was discovered to contain a command injection vulnerability via the tomography_ping_number parameter at function SetNetworkTomographySettings.

CVE-2022-42161HIGHCVSS 8.8v1.082022-10-13

CVE-2022-42161 [HIGH] CWE-77 CVE-2022-42161: D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the /SetTriggerWPS/PIN parameter at function SetTriggerWPS.

CVE-2022-42159MEDIUMCVSS 4.3v1.082022-10-13

CVE-2022-42159 [MEDIUM] CWE-335 CVE-2022-42159: D-Link COVR 1200,1202,1203 v1.08 was discovered to have a predictable seed in a Pseudo-Random Number D-Link COVR 1200,1202,1203 v1.08 was discovered to have a predictable seed in a Pseudo-Random Number Generator.