CVE-2022-28958: D-Link DIR-816L Remote Code Execution Vulnerability

Published May 18, 2022
·
Updated

DISPUTED D-Link DIR816LFW206b01 was discovered to contain a remote code execution (RCE) vulnerability via the value parameter at shareport.php. NOTE: this has been disputed by a third party.

Other sources

D-Link DIR-816L contains an unspecified vulnerability in the shareport.php value parameter which allows for remote code execution.

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

Affected Software

3 affected components
D-Link DIR-816L
Dlink Dir-816l Firmware=206b01
Dlink DIR-816L

Remediation

Information

This CVE is currently in disputed status. During the review process, agencies should update per vendor instructions.

Event History

Jan 1, 1970
CVE Published
via MITRE·12:00 AM
May 18, 2022
CVE Published
12:15 PM
Disputed
12:15 PM
Data Sourced
12:15 PM
Description
Sep 8, 2022
Known Exploited
12:00 AM
Nov 29, 2023
Rejected
via MITRE·08:51 PM
Dec 6, 2023
News Published
02:45 PM
Feb 25, 2026
Rejected
via MITRE·03:13 PM
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is CVE-2022-28958?

CVE-2022-28958 is a remote code execution (RCE) vulnerability found in the D-Link DIR-816L router.

2

How severe is CVE-2022-28958?

CVE-2022-28958 has a severity rating of 9.8 (critical).

3

Which software or products are affected by CVE-2022-28958?

The D-Link DIR-816L router firmware version 206b01 is affected by CVE-2022-28958.

4

How can I fix CVE-2022-28958?

To fix CVE-2022-28958, update the D-Link DIR-816L router firmware to a version that is not vulnerable.

5

Where can I find more information about CVE-2022-28958?

You can find more information about CVE-2022-28958 at the following references: [Link 1](https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10300), [Link 2](https://github.com/shijin0925/IOT/blob/master/DIR816/3.md), [Link 3](https://vulncheck.com/blog/moobot-uses-fake-vulnerability)

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203