CVE-2021-46315

Remote Command Execution RCE vulnerability exists in HNAP1/control/SetWizardConfig.php in D-Link Router DIR-846 DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicoius users can use this vulnerability to use "\ " or backticks in the shell metacharacters in the ssid0 or ssid1 parameters...

D-Link Router 操作系统命令注入漏洞

The D-Link DIR-846 is a 6-antenna 1200M full Gigabit dual-band MU-MIMO wireless router. An OS command injection vulnerability exists in the D-Link DIR-846 version A1100.26. A remote attacker can exploit this vulnerability to execute arbitrary commands via shell metacharacters in the ssid0 or ssid...