CVE-2022-35191
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk55th percentile - higher than 55% of all known CVEs
Summary
An unauthenticated attacker can cause a Denial of Service (DoS) on the D-Link DSL-3782 router by sending a crafted HTTP request. The vulnerability exists in firmware version v1.01.
Risk Assessment
The attack can disable the router, disrupting internet access for all users on the local network. The lack of authentication requirement makes it easy to execute the attack remotely.
Recommendation
Update the router firmware to the latest version available from the manufacturer's website. If no update is available, consider restricting access to the management interface to trusted networks only.
Other vulnerabilities in D-Link DSL-3782
See all- CVE-2026-90880High
A security flaw has been discovered in D-Link DSL-3782 2016-07-28. This issue affects the function system of the file /cgi-bin/New_GUI/Set/Diagnostics.asp of the component Diagnostics. Performing a manipulation of the argument Addr results in command injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.
- CVE-2023-27216High
An issue found in D-Link DSL-3782 v.1.03 allows remote authenticated users to execute arbitrary code as root via the network settings page.
- CVE-2022-35192High
An unauthenticated attacker can cause a Denial of Service (DoS) on the D-Link DSL-3782 router by sending crafted User or Pwd parameters to Login.asp. The vulnerability affects firmware version v1.01.
Original NVD description (English source)
D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to cause a Denial of Service (DoS) via a crafted HTTP connection request.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS