CVE-2022-28955 Missing authorization in n/a
Unauthenticated attackers can access specific folders via vulnerable PHP scripts on D-Link DIR816L routers, leading to unauthorized data disclosure.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-28955?
CVE-2022-28955 is a high-severity missing authorization vulnerability in n/a, published on 18 May 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attackers to access folders folder_view.php and category_view.php.
Weakness: CWE-287
Which versions are affected by CVE-2022-28955?
It affects 1 product.
Products include Dlink Dir-816l Firmware.
How do I fix CVE-2022-28955?
No fix has been published for CVE-2022-28955 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2022-28955 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-28955 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in n/a
- CVE-2022-28956 Auth bypass in n/a
- CVE-2020-15893 Command injection in n/a
- CVE-2025-13188 D-Link DIR-816L authentication.cgi authenticationcgi_main stack-based overflow
- CVE-2025-13189 D-Link DIR-816L gena.cgi genacgi_main stack-based overflow
- CVE-2025-13190 D-Link DIR-816L __ajax_exporer.sgi scandir_main stack-based overflow
Sources
Also known as GHSA-h93j-r724-8967.