CVE-2022-28955

Name of the Vulnerable Software and Affected Versions D-Link DIR816L versions prior to FW206b01

Description The issue is related to insufficient access control in the software of D-Link DIR816L routers. This allows remote attackers to access sensitive folders, specifically "folder view.php" and "category view.php".

Recommendations For D-Link DIR816L versions prior to FW206b01, update to a version that includes the necessary security patches to fix the access control issue. As a temporary workaround, consider restricting access to the "folder view.php" and "category view.php" folders to minimize the risk of exploitation.