CVE-2022-26258
D-Link DIR-820L Remote Code Execution Vulnerability
Published Mar 27, 2022 · updated Jul 9, 2026 · dlink dir-820l firmware
D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter in /lan.asp which allows for remote code execution.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Mar 27, 2022 · Catalog
Detected
D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter in /lan.asp which allows for remote code execution.
Sep 8, 2022 · CISA KEV
Known exploited
The impacted product is end-of-life and should be disconnected if still in use.
Sep 29, 2022 · CISA KEV
Remediation due
The impacted product is end-of-life and should be disconnected if still in use.
Jul 9, 2026 · Catalog
Updated
D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter in /lan.asp which allows for remote code execution.
Required action
The impacted product is end-of-life and should be disconnected if still in use.
CISA due date Sep 29, 2022
Affected
- cpe dlink/dir-820l firmware1.05b03
- vendor D-Link DIR-820Lversion unspecified
Sources
- CISA KEVConfirmed exploitationCVE-2022-26258
D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter in /lan.asp which allows for remote code execution.
cisa.gov - CVE.orgVulnerability recordCVE-2022-26258
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2022-26258
30-day exploitation probability 91.6%
first.org - NIST NVDVulnerability recordCVE-2022-26258
D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.
nvd.nist.gov