CVE-2022-28932

CriticalCVSS 9.8

Published: 23/05/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

2.07%

79th percentile - higher than 79% of all known CVEs

Summary

The D-Link DSL-G2452DG (hardware version T1, firmware ME_2.00) was found to have insecure permission settings. This vulnerability could allow unauthorized users to access sensitive functions or data.

Risk Assessment

The risk involves potential privilege escalation or unauthorized access to device configuration, which could lead to full compromise of the router and network security.

Recommendation

It is recommended to immediately update the firmware to the latest version available from the vendor and review/correct permission settings in the administrative panel.

Original NVD description (English source)

D-Link DSL-G2452DG HW:T1\\tFW:ME_2.00 was discovered to contain insecure permissions.