CVE-2021-44880: Command Injection
D-Link devices DIR878 DIR878FW1.30B08Hotfix02 and DIR882 DIR882FW1.30B06Hotfix02 were discovered to contain a command injection vulnerability in the system function. This vulnerability allows attackers to execute arbitrary commands via a crafted HNAP1 POST request.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-44880?
CVE-2021-44880 is a command injection vulnerability affecting D-Link devices DIR-878 and DIR-882.
What is the severity of CVE-2021-44880?
CVE-2021-44880 has a severity rating of 9.8, which is considered critical.
How does CVE-2021-44880 work?
CVE-2021-44880 allows attackers to execute arbitrary commands by sending a crafted HNAP1 POST request to the affected D-Link devices.
Which D-Link devices are affected by CVE-2021-44880?
D-Link devices DIR-878 (firmware versions up to 1.30B08_Hotfix_02) and DIR-882 (firmware versions up to 1.30B06_Hotfix_02) are affected by CVE-2021-44880.
How can I mitigate CVE-2021-44880?
To mitigate CVE-2021-44880, it is recommended to update the firmware on the affected D-Link devices to the latest patched version.