dir-846w_firmware vulnerabilities
4 known vulnerabilities in dir-846w_firmware from D-Link. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
dir-846w_firmware: Improper Neutralization of Special Elements used in an OS Command
D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the wl(0).(0)_ssid parameter. This vulnerability is exploited via a crafted POST request.
- 9.8 Critical severity
dir-846w_firmware: Improper Neutralization of Special Elements used in an OS Command
D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the lan(0)_dhcps_staticlist parameter. This vulnerability is exploited via a crafted POST request.
- 8.8 High severity
dir-846w_firmware: Improper Neutralization of Special Elements used in an OS Command
D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via keys smartqos_express_devices and smartqos_normal_devices in SetSmartQoSSettings.
- 9.8 Critical severity
dir-846w_firmware: Improper Neutralization of Special Elements used in an OS Command
D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter in /HNAP1/ interface.