D-Link · DIR-820L

CVE-2022-26258

D-Link DIR-820L Remote Code Execution Vulnerability

Exploited in attacks Critical 9.8 Attack chance: 92%

What it is

D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.

CISA: D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter in /lan.asp which allows for remote code execution.

What to do

The impacted product is end-of-life and should be disconnected if still in use.

Deadline for US federal agencies: September 29, 2022

Added to the CISA list: September 8, 2022
Published: March 27, 2022
Severity: Critical 9.8 CVSS 3.1
Chance of attacks in the next 30 days (EPSS): 92% in the top 0.2% of all known vulnerabilities
Weakness: CWE-78
More details: NVD · CVE.org · CISA

All references (3)

More exploited flaws from D-Link

Added	Vulnerability	Product	Severity	Attack chance
Apr 24, 2026	Command InjectionCVE-2025-29635	DIR-823X	High 7.2	88%
Dec 8, 2025	Buffer OverflowCVE-2022-37055	Routers	Critical 9.8	56%
Aug 5, 2025	UnspecifiedCVE-2020-25078	DCS-2530L and DCS-2670L Devices	High 7.5	98%
Aug 5, 2025	DCS-2530L and DCS-2670L Command InjectionCVE-2020-25079	DCS-2530L and DCS-2670L Devices	High 8.8	54%
Aug 5, 2025	Download of Code Without Integrity CheckCVE-2022-40799	DNR-322L	High 8.8	34%
Jun 25, 2025	D-Link DIR-859 Router Path TraversalCVE-2024-0769	DIR-859 Router	Medium 5.3	83%
Sep 30, 2024	OS Command InjectionCVE-2023-25280	DIR-820 Router	Critical 9.8	98%
May 16, 2024	Information DisclosureCVE-2021-40655	DIR-605 Router	High 7.5	87%

All of them →

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.