Approved changes feed: RSS · Atom

cpe:2.3:o:dlink:dsl-224_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorDlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44)
ProductDsl 224 Firmware (4158bd82-7520-5a5a-ad78-ab3cb3b0cb31)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-36786 vulnerable 2026-06-08 05:46:07.787882 DLINK - DSL-224 Post-auth RCE.
CRITICAL (9.9)
DLINK - DSL-224 Post-auth RCE. DLINK router version 3.0.8 has an interface where you can configure NTP servers (Network Time Protocol) via jsonrpc API. It is possible to inject a command through this interface that will run with ROOT permissions on the router.
Published: 2022-11-17T00:00:00.000Z
Updated: 2025-04-29T20:01:06.332Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.