Vulnerabilities > Dlink > DIR 3060 Firmware > 1.02b03

DATE CVE VULNERABILITY TITLE RISK
2022-04-11 CVE-2022-1262 OS Command Injection vulnerability in Dlink products
A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary commands as root.
local
low complexity
dlink CWE-78
7.2
2021-03-11 CVE-2021-28144 Command Injection vulnerability in Dlink Dir-3060 Firmware
prog.cgi on D-Link DIR-3060 devices before 1.11b04 HF2 allows remote authenticated users to inject arbitrary commands in an admin or root context because SetVirtualServerSettings calls CheckArpTables, which calls popen unsafely.
network
low complexity
dlink CWE-77
critical
9.0