Lucene search
+L

13 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 3:53 a.m.•19 views

CVE-2023-33735

D-Link DIR-846 v1.00A52 was discovered to contain a remote command execution RCE vulnerability via the tomographypingaddress parameter in the /HNAP1 interface...

9.8CVSS7.7AI score0.31557EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2024/09/09 12:00 a.m.•19 views

D-Link DIR-846W Router Code Execution

The vulnerability of the D-Link DIR-846W router’s microprogramming software is related to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through the...

10CVSS6AI score0.02031EPSS
SaveExploits0References4
CNVD
CNVD
•added 2024/08/28 12:00 a.m.•27 views

D-Link DIR-846W Command Execution Vulnerability

D-Link DIR-846W is a dual-band Gigabit wireless router with second-generation 11AC technology and MU-MIMO technology, supporting dual-band concurrent transmission rates up to 1200Mbps for 200M and above broadband users. The D-Link DIR-846W suffers from a command execution vulnerability that stems...

9.8CVSS7.4AI score0.02031EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/08/27 12:00 a.m.•19 views

PT-2024-5964 · D Link · D-Link Dir-846

Name of the Vulnerable Software and Affected Versions: D-Link DIR-846W A1 FW100A43 Description: The issue is related to a remote command execution vulnerability via the tomography ping address parameter in the /HNAP1/ interface. This vulnerability may allow a remote attacker to execute arbitrary...

9.8CVSS7.9AI score0.02031EPSS
SaveExploits0References17
BDU FSTEC
BDU FSTEC
•added 2023/06/05 12:00 a.m.•32 views

HNAP1 Protocol Arbitrary Command Execution

The vulnerability of the HNAP1 protocol implementation in D-Link DIR-846 router microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system’s command processing for handling the tomographypingaddress parameter. Exploiting this...

9CVSS8.2AI score0.31557EPSS
SaveExploits1References4Affected Software1
attackerkb
attackerkb
•added 2023/05/31 8:15 p.m.•23 views

CVE-2023-33735

D-Link DIR-846 v1.00A52 was discovered to contain a remote command execution RCE vulnerability via the tomographypingaddress parameter in the /HNAP1 interface...

9.8CVSS7.6AI score0.31557EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2023/05/31 8:15 p.m.•19 views

CVE-2023-33735

D-Link DIR-846 v1.00A52 was discovered to contain a remote command execution RCE vulnerability via the tomographypingaddress parameter in the /HNAP1 interface...

9.8CVSS5.9AI score0.31557EPSS
SaveExploits1References2
Prion
Prion
•added 2023/05/31 8:15 p.m.•29 views

Command injection

D-Link DIR-846 v1.00A52 was discovered to contain a remote command execution RCE vulnerability via the tomographypingaddress parameter in the /HNAP1 interface...

7.5CVSS9.6AI score0.31557EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/05/31 12:00 a.m.•19 views

CVE-2023-33735

D-Link DIR-846 v1.00A52 was discovered to contain a remote command execution RCE vulnerability via the tomographypingaddress parameter in the /HNAP1 interface...

7.9AI score0.31557EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/05/31 12:00 a.m.•18 views

D-Link DIR-846 security vulnerabilities

The D-Link DIR-846 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-846 v1.00A52, which originates from allowing malicious commands to be injected via the tomographypingaddress parameter in the HNAP1 interface...

9.8CVSS8.4AI score0.31557EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/05/22 12:00 a.m.•16 views

PT-2023-2983 · D Link · D-Link Dir-846

Name of the Vulnerable Software and Affected Versions: D-Link DIR-846 version 1.00A52 Description: The issue is related to the implementation of the HNAP1 protocol in the D-Link DIR-846 router's firmware, specifically concerning the handling of the tomography ping address parameter. This can be...

9.8CVSS7.7AI score0.31557EPSS
SaveExploits1References7
BDU FSTEC
BDU FSTEC
•added 2022/02/16 12:00 a.m.•25 views

D-Link DIR-823-Pro SetNetworkTomographySettings Command Execution

The vulnerability of the implementation of the SetNetworkTomographySettings function in the microprogrammed wireless router software from D-Link DIR-823-Pro relates to insufficient cleaning of input data during the processing of parameters tomographypingaddress, tomographypingnumber,...

10CVSS8.1AI score0.03746EPSS
SaveExploits0References4Affected Software1
osv_cve
osv_cve
•added 2022/02/04 2:15 a.m.•21 views

CVE-2021-46452

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNetworkTomographySettings. This vulnerability allows attackers to execute arbitrary commands via the tomographypingaddress, tomographypingnumber, tomographypingsize,...

9.8CVSS6AI score0.03746EPSS
SaveExploits0References3
Rows per page
Query Builder