PT-2021-11412

Name of the Vulnerable Software and Affected Versions: D-Link Router DIR-846 version A1 100.26 Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the ssid0 or ssid1 parameter in the "HNAP1/control/SetMasterWLanSettings.php" endpoint...

CVE-2020-27600: Improper Neutralization of Special Elements used in an OS Command

HNAP1/control/SetMasterWLanSettings.php in D-Link D-Link Router DIR-846 DIR-846 A1100.26 allows remote attackers to execute arbitrary commands via shell metacharacters in the ssid0 or ssid1 parameter...

PT-2019-5830

Name of the Vulnerable Software and Affected Versions D-Link DIR-846 version 100A35 Description The issue is related to insufficient argument checking in the SetMasterWLanSettings function of the D-Link DIR-846 firmware, allowing remote attackers to execute arbitrary OS commands as root. This can...