Dlink Dir-3060 Firmware vulnerabilities

3 known vulnerabilities affecting dlink/dir-3060_firmware.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1HIGH2

Vulnerabilities

Page 1 of 1

CVE-2022-44204CRITICALCVSS 9.8v1.11b042022-11-18

CVE-2022-44204 [CRITICAL] CWE-120 CVE-2022-44204: D-Link DIR3060 DIR3060A1_FW111B04.bin is vulnerable to Buffer Overflow. D-Link DIR3060 DIR3060A1_FW111B04.bin is vulnerable to Buffer Overflow.

CVE-2022-1262HIGHCVSS 7.8v1.00b12v1.11b04+3 more2022-04-11

CVE-2022-1262 [HIGH] CWE-78 CVE-2022-1262: A command injection vulnerability in the protest binary allows an attacker with access to the remote A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary commands as root.

CVE-2021-28144HIGHCVSS 8.8≤ 1.11b042021-03-11

CVE-2021-28144 [HIGH] CWE-78 CVE-2021-28144: prog.cgi on D-Link DIR-3060 devices before 1.11b04 HF2 allows remote authenticated users to inject a prog.cgi on D-Link DIR-3060 devices before 1.11b04 HF2 allows remote authenticated users to inject arbitrary commands in an admin or root context because SetVirtualServerSettings calls CheckArpTables, which calls popen unsafely.