D-Link DIR-846 has unspecified vulnerabilities

The D-Link DIR-846 is a wireless router from D-Link, a Chinese company. A remote attacker can execute arbitrary code as root via HNAP1/control/SetGuestWLanSettings.php...

CVE-2020-21016

D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary code as root via HNAP1/control/SetGuestWLanSettings.php...

CVE-2020-21016

CVE-2020-21016 affects D-Link DIR-846 devices with firmware 100A35. The vulnerability arises from insufficient input/argument validation in the HNAP1/control/SetGuestWLanSettings.php endpoint, enabling remote code execution as root over the network. What is vulnerable: the specific endpoint and i...