Dir-846 Firmware vulnerabilities

4 known vulnerabilities in Dir-846 Firmware from D-Link. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  DIR-846: Deserialization of Untrusted Data

  CVE-2023-6580Dec 7, 2023D-LinkEPSS 2.35%

  A vulnerability, which was classified as critical, was found in D-Link DIR-846 FW100A53DBR. This affects an unknown part of the file /HNAP1/ of the component QoS POST Handler. The manipulation of the argument smartqos_express_devices/smartqos_normal_devices le

• 8.8 High severity

  Dir-846 Firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-46552Feb 2, 2023D-LinkEPSS 10.9%

  D-Link DIR-846 Firmware FW100A53DBR was discovered to contain a remote command execution (RCE) vulnerability via the lan(0)_dhcps_staticlist parameter. This vulnerability is exploited via a crafted POST request.

• 9.9 Critical severity

  Dir-846 Firmware: Improper Neutralization of Special Elements used in a Command

  CVE-2022-46642Dec 23, 2022D-LinkEPSS 3.09%

  D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the auto_upgrade_hour parameter in the SetAutoUpgradeInfo function.

• 9.9 Critical severity

  Dir-846 Firmware: Improper Neutralization of Special Elements used in a Command

  CVE-2022-46641Dec 23, 2022D-LinkEPSS 3.09%

  D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the lan(0)_dhcps_staticlist parameter in the SetIpMacBindSettings function.