CVE-2022-35192
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk55th percentile - higher than 55% of all known CVEs
Summary
An unauthenticated attacker can cause a Denial of Service (DoS) on the D-Link DSL-3782 router by sending crafted User or Pwd parameters to Login.asp. The vulnerability affects firmware version v1.01.
Risk Assessment
A DoS attack can render the router unusable, disrupting network operations for home or small office users. The lack of authentication requirement makes the attack easy to execute.
Recommendation
Update the router firmware to the latest available version. If no patch is provided by the vendor, consider replacing the device with a supported model.
Other vulnerabilities in D-Link DSL-3782
See all- CVE-2023-27216High
An issue found in D-Link DSL-3782 v.1.03 allows remote authenticated users to execute arbitrary code as root via the network settings page.
- CVE-2022-35191Medium
An unauthenticated attacker can cause a Denial of Service (DoS) on the D-Link DSL-3782 router by sending a crafted HTTP request. The vulnerability exists in firmware version v1.01.
Original NVD description (English source)
D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to cause a Denial of Service (DoS) via the User parameter or Pwd parameter to Login.asp.