CVE-2022-46641: Improper Neutralization of Special Elements used in a Command

D-Link DIR-846 A1FW100A43 was discovered to contain a command injection vulnerability via the lan0dhcpsstaticlist parameter in the SetIpMacBindSettings function...

CVE-2022-46642

CVE-2022-46642 affects the D‑Link DIR‑846 A1 with firmware FW100A43. The root cause is improper input handling in the SetAutoUpgradeInfo function, where the parameter auto_upgrade_hour can be used to construct and execute commands, resulting in a remote command injection vulnerability. Impact per...

CVE-2022-46642: Improper Neutralization of Special Elements used in a Command

D-Link DIR-846 A1FW100A43 was discovered to contain a command injection vulnerability via the autoupgradehour parameter in the SetAutoUpgradeInfo function...