Lucene search
+L

120 matches found

Cvelist
Cvelist
added 2022/12/23 12:0 a.m.32 views

CVE-2022-46642

D-Link DIR-846 A1FW100A43 was discovered to contain a command injection vulnerability via the autoupgradehour parameter in the SetAutoUpgradeInfo function...

10AI score0.03081EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/12/23 12:0 a.m.9 views

PT-2022-27933 · D Link · D-Link Dir-846

Name of the Vulnerable Software and Affected Versions: D-Link DIR-846 version A1 FW100A43 Description: A command injection issue was discovered via the auto upgrade hour parameter in the SetAutoUpgradeInfo function. This allows for potential exploitation. No information is provided about the...

9.9CVSS9.5AI score0.03081EPSS
SaveExploits1References5
CVE
CVE
added 2022/12/23 12:0 a.m.82 views

CVE-2022-46642

CVE-2022-46642 affects the D‑Link DIR‑846 A1 with firmware FW100A43. The root cause is improper input handling in the SetAutoUpgradeInfo function, where the parameter auto_upgrade_hour can be used to construct and execute commands, resulting in a remote command injection vulnerability. Impact per...

9.9CVSS9.8AI score0.03081EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/12/23 12:0 a.m.23 views

CVE-2022-46641

D-Link DIR-846 A1FW100A43 was discovered to contain a command injection vulnerability via the lan0dhcpsstaticlist parameter in the SetIpMacBindSettings function...

10AI score0.03081EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/11/30 12:0 a.m.5 views

PT-2022-6264 · D Link · D-Link Dir-846

Name of the Vulnerable Software and Affected Versions: D-Link DIR-846 Firmware FW100A53DBR Description: The issue is related to a remote command execution vulnerability via the lan0 dhcps staticlist parameter. This vulnerability can be exploited through a crafted POST request, allowing a remote...

9CVSS8.7AI score0.10503EPSS
SaveExploits4References12
CNVD
CNVD
added 2022/11/02 12:0 a.m.25 views

D-Link DIR-846 has unspecified vulnerabilities

The D-Link DIR-846 is a wireless router from D-Link, a Chinese company. A remote attacker can execute arbitrary code as root via HNAP1/control/SetGuestWLanSettings.php...

6.4AI score0.02009EPSS
SaveExploits1
OSV
OSV
added 2022/10/31 1:15 p.m.6 views

CVE-2020-21016

D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary code as root via HNAP1/control/SetGuestWLanSettings.php...

9.8CVSS6.1AI score0.02009EPSS
SaveExploits1References2
NVD
NVD
added 2022/10/31 1:15 p.m.26 views

CVE-2020-21016

D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary code as root via HNAP1/control/SetGuestWLanSettings.php...

9.8CVSS0.02009EPSS
SaveExploits1References2
Prion
Prion
added 2022/10/31 1:15 p.m.22 views

Code injection

D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary code as root via HNAP1/control/SetGuestWLanSettings.php...

7.5CVSS9.8AI score0.02009EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/10/31 12:0 a.m.32 views

CVE-2020-21016

D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary code as root via HNAP1/control/SetGuestWLanSettings.php...

9.8AI score0.02009EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/10/31 12:0 a.m.7 views

D-Link DIR-846 安全漏洞

The D-Link DIR-846 is a wireless router from D-Link, a Chinese company. A remote attacker can execute arbitrary code as root via HNAP1/control/SetGuestWLanSettings.php...

9.8CVSS7.9AI score0.02009EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2022/10/31 12:0 a.m.11 views

CVE-2020-21016

D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary code as root via HNAP1/control/SetGuestWLanSettings.php...

9.8AI score0.02009EPSS
SaveExploits1References2
CVE
CVE
added 2022/10/31 12:0 a.m.54 views

CVE-2020-21016

CVE-2020-21016 affects D-Link DIR-846 devices with firmware 100A35. The vulnerability arises from insufficient input/argument validation in the HNAP1/control/SetGuestWLanSettings.php endpoint, enabling remote code execution as root over the network. What is vulnerable: the specific endpoint and i...

9.8CVSS9.8AI score0.02009EPSS
SaveExploits1References2Affected Software1
Check Point Advisories
Check Point Advisories
added 2022/05/08 12:0 a.m.62 views

D-Link DIR-846 Command Injection (CVE-2021-46314; CVE-2021-46315; CVE-2021-46319)

A command injection vulnerability exists in D-Link DIR-846. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

10CVSS5.6AI score0.33287EPSS
SaveExploits3
BDU FSTEC
BDU FSTEC
added 2022/02/25 12:0 a.m.10 views

The vulnerabilities of the DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin microprogramming systems of D-Link DIR-846 allow a hacker to execute arbitrary commands.

The vulnerability of the DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin microprogramming systems of D-Link DIR-846 routers is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

10CVSS8.1AI score0.06573EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2022/02/25 12:0 a.m.10 views

The vulnerabilities of the DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin microprogramming systems of D-Link DIR-846 allow a hacker to execute arbitrary commands.

The vulnerability of the DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin microprogramming systems of D-Link DIR-846 routers is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability can allow a malicious actor to execute arbitrary commands using a...

10CVSS8.1AI score0.33287EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2022/02/25 12:0 a.m.10 views

The vulnerabilities of the DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin microprogramming systems of D-Link DIR-846 allow a hacker to execute arbitrary commands.

The vulnerability of the DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin microprogramming systems of D-Link DIR-846 routers is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability can allow a malicious actor to execute arbitrary commands using a...

10CVSS8.1AI score0.06573EPSS
SaveExploits1References3
CNVD
CNVD
added 2022/02/21 12:0 a.m.19 views

D-Link DIR-846 Command Execution Vulnerability

A command execution vulnerability exists in the D-Link DIR-846, a wireless router from D-Link in Taiwan, China, which originates in the product HNAP1/control/SetNetworkTomographySettings.php file. The vulnerability is caused by the fact that the HNAP1/control/SetNetworkTomographySettings.php file...

9.8CVSS2.5AI score0.33287EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/02/21 12:0 a.m.29 views

D-Link DIR-846 Command Execution Vulnerability (CNVD-2022-38534)

The D-Link DIR-846 is a wireless router from D-Link, a Taiwan-based company, and a command execution vulnerability exists in the D-Link DIR-846. The vulnerability can be exploited by attackers to cause remote code execution...

10CVSS6.5AI score0.06573EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/02/17 10:15 p.m.6 views

CVE-2021-46315

Remote Command Execution RCE vulnerability exists in HNAP1/control/SetWizardConfig.php in D-Link Router DIR-846 DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicoius users can use this vulnerability to use "\ " or backticks in the shell metacharacters in the ssid0 or ssid1 parameters...

10CVSS8AI score0.06573EPSS
SaveExploits1References3
Rows per page
Query Builder