D-Link DIR-822+ V1.0.5 was found to contain a command injection in ChgSambaUserSettings function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell.
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')