Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2022-37133: D-link DIR-816 A2_v1.10CNB04.img reboots the router without authentication via /goform/doReboot. No authentication is required, and reboot is executed when the function returns at the end.
CVE-2022-37133 · published 4 years ago
Summary
D-link DIR-816 A2_v1.10CNB04.img reboots the router without authentication via /goform/doReboot. No authentication is required, and reboot is executed when the function returns at the end.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| dlink | dir-816_firmware |
1.10cnb04 cpe:2.3:o:dlink:dir-816_firmware:1.10cnb04:*:*:*:*:*:*:* |
Original advisory text
D-link DIR-816 A2_v1.10CNB04.img reboots the router without authentication via /goform/doReboot. No authentication is required, and reboot is executed when the function returns at the end.
D-link DIR-816 A2_v1.10CNB04.img reboots the router without authentication via /goform/doReboot. No authentication is required, and reboot is executed when the function returns at the end.
References
- https://github.com/z1r00/IOT_Vul/blob/main/dlink/Dir816/doReboot/readme.md Exploit Third Party Advisory
- https://www.dlink.com/en/security-bulletin/ Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-404Improper Resource Shutdown or Release
Timeline
Published22 Aug 2022
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2022-37133 · NVD
Track software like this
Free during beta