CVE-2022-46642

CVE-2022-46642 affects the D‑Link DIR‑846 A1 with firmware FW100A43. The root cause is improper input handling in the SetAutoUpgradeInfo function, where the parameter auto_upgrade_hour can be used to construct and execute commands, resulting in a remote command injection vulnerability. Impact per...