CVE-2022-42159

D-Link COVR 1200,1202,1203 v1.08 was discovered to have a predictable seed in a Pseudo-Random Number Generator.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dlink:covr_1203_firmware:1.08:*:*:*:*:*:*:*
cpe:2.3:h:dlink:covr_1203:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:dlink:covr_1202_firmware:1.08:*:*:*:*:*:*:*
cpe:2.3:h:dlink:covr_1202:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:dlink:covr_1200_firmware:1.08:*:*:*:*:*:*:*
cpe:2.3:h:dlink:covr_1200:-:*:*:*:*:*:*:*

History

21 Nov 2024, 07:24

Type Values Removed Values Added
References () https://github.com/14isnot40/vul_discovery/blob/master/D-Link%20COVR%2012xx%20.pdf - Exploit, Third Party Advisory () https://github.com/14isnot40/vul_discovery/blob/master/D-Link%20COVR%2012xx%20.pdf - Exploit, Third Party Advisory
References () https://www.dlink.com/en/security-bulletin/ - Vendor Advisory () https://www.dlink.com/en/security-bulletin/ - Vendor Advisory

08 Aug 2023, 14:22

Type Values Removed Values Added
CWE CWE-338 CWE-335

Information

Published : 2022-10-13 19:15

Updated : 2024-11-21 07:24


NVD link : CVE-2022-42159

Mitre link : CVE-2022-42159

CVE.ORG link : CVE-2022-42159


JSON object : View

Products Affected

dlink

  • covr_1202
  • covr_1200_firmware
  • covr_1200
  • covr_1202_firmware
  • covr_1203_firmware
  • covr_1203
CWE
CWE-335

Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)