CVE-2021-46319

Remote Code Execution RCE vulnerability exists in D-Link Router DIR-846 DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicious users can use this vulnerability to use "\ " or backticks to bypass the shell metacharacters in the ssid0 or ssid1 parameters to execute arbitrary commands.Th...

CVE-2021-46319

Remote Code Execution RCE vulnerability exists in D-Link Router DIR-846 DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicious users can use this vulnerability to use "\ " or backticks to bypass the shell metacharacters in the ssid0 or ssid1 parameters to execute arbitrary commands.Th...

Design/Logic Flaw

Remote Command Execution RCE vulnerability exists in HNAP1/control/SetWizardConfig.php in D-Link Router DIR-846 DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicoius users can use this vulnerability to use "\ " or backticks in the shell metacharacters in the ssid0 or ssid1 parameters...

CVE-2021-46319

Remote Code Execution RCE vulnerability exists in D-Link Router DIR-846 DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicious users can use this vulnerability to use "\ " or backticks to bypass the shell metacharacters in the ssid0 or ssid1 parameters to execute arbitrary commands.Th...

CVE-2021-46315

CVE-2021-46315 is a remote code execution vulnerability affecting D-Link DIR-846 series routers (examples: DIR846A1_FW100A43.bin, DIR846enFW100A53DLA-Retail.bin) via HNAP1/control/SetWizardConfig.php. The flaw allows an attacker to inject shell metacharacters (e.g., , backticks) in ssid0/ssid1 pa...

CVE-2021-46314

A Remote Command Execution RCE vulnerability exists in HNAP1/control/SetNetworkTomographySettings.php of D-Link Router DIR-846 DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin because backticks can be used for command injection when judging whether it is a reasonable domain name...

CVE-2021-46314

A Remote Command Execution RCE vulnerability exists in HNAP1/control/SetNetworkTomographySettings.php of D-Link Router DIR-846 DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin because backticks can be used for command injection when judging whether it is a reasonable domain name...

CVE-2021-46314

A Remote Command Execution RCE vulnerability exists in HNAP1/control/SetNetworkTomographySettings.php of D-Link Router DIR-846 DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin because backticks can be used for command injection when judging whether it is a reasonable domain name...

Command injection

A Remote Command Execution RCE vulnerability exists in HNAP1/control/SetNetworkTomographySettings.php of D-Link Router DIR-846 DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin because backticks can be used for command injection when judging whether it is a reasonable domain name...

CVE-2021-46314

CVE-2021-46314 targets D-Link DIR-846 routers, with the flaw in HNAP1/control/SetNetworkTomographySettings.php. The issue is a backtick-based command injection in domain-name validation, enabling remote command execution over the network. Public sources (NVD) assign a CVSS v3.1 base score of 9.8 ...

多款D-Link产品操作系统命令注入漏洞

D-Link DIR-820L and others are products of China-based AUO D-Link.D-Link DIR-820L is a dual-band wireless router.D-Link Dir-830L is a wireless Ac1200 dual-band cloud router.D-Link Dir-810L is a wireless Ac750 dual-band cloud router. An operating system command injection vulnerability exists in...

The vulnerability of the proxyclient.asp implementation in the D-Link DI-7200G V2.E1 router microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the proxyclient.asp implementation in D-Link DI-7200G V2.E1 microprogramming software is related to insufficient cleaning of input data during the processing of parameters proxysrv, proxysrvport, proxylanip, and proxylanport. Exploiting this vulnerability allows a remote...

The vulnerability of the implementation of the twsystem() function in D-Link DIR-882 wireless router software allows a hacker to execute arbitrary commands.

The vulnerability of the twsystem function in D-Link DIR-882 wireless router microprogrammed software is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the implementation of the SetWLanACLSettings() function in D-Link DIR-823-Pro wireless router software allows a hacker to execute arbitrary commands.

The vulnerability of the implementation of the SetWLanACLSettings function in D-Link DIR-823-Pro wireless router microprogramming software is related to insufficient cleaning of input data during the processing of the parameter wl0.0maclist. Exploiting this vulnerability allows a remote attacker ...

The vulnerability of the httpddebug.asp implementation of the D-Link DI-7200G V2.E1 router microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the httpddebug.asp implementation of the D-Link DI-7200G V2.E1 router microprogramming system is related to insufficient cleaning of input data during the processing of the time parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

The vulnerability of the ChgSambaUserSettings() function implementation in D-Link DIR-823-Pro wireless router software allows a hacker to execute arbitrary commands.

The vulnerability of the ChgSambaUserSettings function in the microprogramming software for D-Link DIR-823-Pro wireless routers is related to insufficient cleaning of input data during the processing of the sambaname parameter. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of the `usb_paswd.asp` file implementation of the D-Link DI-7200G V2.E1 router’s microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the usbpaswd.asp file of the D-Link DI-7200G V2.E1 microprogramming router’s implementation is related to insufficient cleaning of input data during the processing of the name parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

The vulnerability of the wget_test.asp implementation of the D-Link DI-7200G V2.E1 router microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the wgettest.asp implementation of the D-Link DI-7200G V2.E1 router microprogramming system is related to insufficient cleaning of input data during the processing of the url parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the implementation of the twsystem() function in D-Link DIR-878 wireless router software allows a hacker to execute arbitrary commands.

The vulnerability of the twsystem function in D-Link DIR-878 wireless router microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary command...

CVE-2021-41445

A reflected cross-site-scripting attack in web application of D-Link DIR-X1860 before v1.10WWB09Beta allows a remote unauthenticated attacker to execute code in the device of the victim via sending a specific URL to the unauthenticated victim...