The vulnerability of D-Link DIR-846 router’s microprogramming software lies in the insufficient checking of arguments passed in commands, allowing attackers to execute arbitrary commands.

The vulnerability of D-Link DIR-846 router’s microprogramming software is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially created request /HNAP1/ within the...

PT-2022-5330 · D Link · D-Link Dir-846

Name of the Vulnerable Software and Affected Versions: D-Link DIR-846 version 100A35 Description: The issue is related to insufficient argument validation in a command, allowing remote attackers to execute arbitrary code as root. This can be achieved via a specially crafted request to the...