AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-44808

CRITICAL · CVSS 9.8 EPSS 3.83% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-11-22 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2022-44808
Severity
CRITICAL
CVSS
9.8
EPSS
3.83%

Original NVD Description

A command injection vulnerability has been found on D-Link DIR-823G devices with firmware version 1.02B03 that allows an attacker to execute arbitrary operating system commands through well-designed /HNAP1 requests. Before the HNAP API function can process the request, the system function executes an untrusted command that triggers the vulnerability.