CVE Catalog

CVE-2022-35191

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.90%

55th percentile - higher than 55% of all known CVEs

Summary

An unauthenticated attacker can cause a Denial of Service (DoS) on the D-Link DSL-3782 router by sending a crafted HTTP request. The vulnerability exists in firmware version v1.01.

Risk Assessment

The attack can disable the router, disrupting internet access for all users on the local network. The lack of authentication requirement makes it easy to execute the attack remotely.

Recommendation

Update the router firmware to the latest version available from the manufacturer's website. If no update is available, consider restricting access to the management interface to trusted networks only.

Original NVD description (English source)

D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to cause a Denial of Service (DoS) via a crafted HTTP connection request.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS