vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2022-38873

HIGH
7.5
CVSS Score
Published: December 20, 2022 at 12:00 AM UTC
Updated: June 17, 2026 at 04:57 AM UTC
18 products affected across 1 vendorDap 2695 FirmwareDap 2660 FirmwareDap 2553 Firmware

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.5
Exploit prediction
EPSS 0.5%
SSVC
PoC

Description

D-Link devices DAP-2310 v2.10rc036 and earlier, DAP-2330 v1.06rc020 and earlier, DAP-2360 v2.10rc050 and earlier, DAP-2553 v3.10rc031 and earlier, DAP-2660 v1.15rc093 and earlier, DAP-2690 v3.20rc106 and earlier, DAP-2695 v1.20rc119_beta31 and earlier, DAP-3320 v1.05rc027 beta and earlier, DAP-3662 v1.05rc047 and earlier allows attackers to cause a Denial of Service (DoS) via uploading a crafted firmware after modifying the firmware header.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Dap 2310 Firmware· D-Link
95%
v ≤ 2.10rc036
dlink-dap-2310 (same device)
Dap 2330 Firmware· D-Link
95%
v ≤ 1.06rc020
dlink-dap-2330 (same device)
Dap 2360 Firmware· D-Link
95%
v ≤ 2.10rc050
dlink-dap-2360 (same device)
Dap 2553 Firmware· D-Link
95%
v ≤ 3.10rc031
dlink-dap-2553 (same device)
Dap 2660 Firmware· D-Link
95%
v ≤ 1.15rc093
dlink-dap-2660 (same device)
Dap 2690 Firmware· D-Link
95%
v ≤ 3.20rc106
dlink-dap-2690 (same device)
Dap 2695 Firmware· D-Link
95%
v < 1.20rc1191.20rc119 beta31
Affected range stops below 1.20rc119, so it looks safe — our inference, not a vendor statement
dlink-dap-2695 (same device)
Dap 3320 Firmware· D-Link
95%
v < 1.05rc0271.05rc27 beta
Affected range stops below 1.05rc027, so it looks safe — our inference, not a vendor statement
dlink-dap-3320 (same device)
Dap 3662 Firmware· D-Link
95%
v ≤ 1.05rc047
dlink-dap-3662 (same device)
DAP-2310· D-Linkdevice
80%
All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (2)

ExploitThird Party Advisory
Source: [email protected]
https://github.com/Yuhao-W/BUG--D-Link--Firmware-Update-Vulnerabilities/blob/main/README.md
Vendor Advisory
Source: [email protected]
https://www.dlink.com/en/security-bulletin/

SSVC — Action Prioritization

SSVCPoCAutomatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.5HIGHCISA-ADP
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfoCWE-345

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card