CVE-2022-28955

HIGH NUCLEI

D-Link DIR816L_FW206b01 - Info Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2022-28955 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.

Description

An access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attackers to access folders folder_view.php and category_view.php.

Nuclei Templates (1)

D-Link DIR-816L - Improper Access Control
HIGHVERIFIEDby arafatansari
Shodan: http.html:"DIR-816L" || http.html:"dir-816l"
FOFA: body="dir-816l"

References (2)

Core 2
Core References
Vendor Advisory x_refsource_misc
https://www.dlink.com/en/security-bulletin/

Scores

CVSS v3 7.5
EPSS 0.3829
EPSS Percentile 98.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-287
Status published
Products (1)
dlink/dir-816l_firmware 206b01
Published May 18, 2022
Tracked Since Feb 18, 2026