CVE-2022-28955 is an access control vulnerability affecting D-Link DIR-816L routers with firmware version 206b01, allowing unauthenticated attackers to access sensitive folders like folder_view.php and category_view.php. With a CVSS score of 7.5 (HIGH) and an EPSS score indicating high exploitability, this flaw presents a significant risk due to its network-based attack vector and low attack complexity, potentially leading to unauthorized information disclosure. While not currently in the KEV catalog or showing active exploitation, exploit templates are available for tools like Nuclei, and its high FAUCET Risk Score of 99/100 suggests a critical concern despite minimal public discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
206b01CPE matchmatch criteria | cpe:2.3:o:dlink:dir-816l_firmware:206b01:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.