Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
dir-846_firmware vulnerabilities and exploits
(subscribe to this query)
9.8
CVSSv3
CVE-2021-46319
Remote Code Execution (RCE) vulnerability exists in D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicious users can use this vulnerability to use "\ " or backticks to bypass the shell metacharacters in the ssid0 or ssid1 parameters to...
Dlink Dir-846 Firmware 100a43
Dlink Dir-846 Firmware 100a53dla
9.8
CVSSv3
CVE-2021-46314
A Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetNetworkTomographySettings.php of D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin because backticks can be used for command injection when judging whether it is a reasonable do...
Dlink Dir-846 Firmware 100a43
Dlink Dir-846 Firmware 100a53dla
9.8
CVSSv3
CVE-2021-46315
Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetWizardConfig.php in D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicoius users can use this vulnerability to use "\ " or backticks in the shell metacharacters in...
Dlink Dir-846 Firmware 100a43
Dlink Dir-846 Firmware 100a53dla
9.8
CVSSv3
CVE-2023-33735
D-Link DIR-846 v1.00A52 exists to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter in the /HNAP1 interface.
Dlink Dir-846 Firmware 100a52
8.8
CVSSv3
CVE-2023-43284
D-Link Wireless MU-MIMO Gigabit AC1200 Router DIR-846 100A53DBR-Retail devices allow an authenticated remote malicious user to execute arbitrary code via an unspecified manipulation of the QoS POST parameter.
Dlink Dir-846 Firmware 100a53dbr
1 Github repository
8.8
CVSSv3
CVE-2023-6580
A vulnerability, which was classified as critical, was found in D-Link DIR-846 FW100A53DBR. This affects an unknown part of the file /HNAP1/ of the component QoS POST Handler. The manipulation of the argument smartqos_express_devices/smartqos_normal_devices leads to deserializati...
Dlink Dir-846 Firmware 100a53dbr
9.8
CVSSv3
CVE-2019-17510
D-Link DIR-846 devices with firmware 100A35 allow remote malicious users to execute arbitrary OS commands as root by leveraging admin access and sending a /HNAP1/ request for SetWizardConfig with shell metacharacters to /squashfs-root/www/HNAP1/control/SetWizardConfig.php.
Dlink Dir-846 Firmware 100a35
9.8
CVSSv3
CVE-2020-21016
D-Link DIR-846 devices with firmware 100A35 allow remote malicious users to execute arbitrary code as root via HNAP1/control/SetGuestWLanSettings.php.
Dlink Dir-846 Firmware 100a35
9.8
CVSSv3
CVE-2019-17509
D-Link DIR-846 devices with firmware 100A35 allow remote malicious users to execute arbitrary OS commands as root by leveraging admin access and sending a /HNAP1/ request for SetMasterWLanSettings with shell metacharacters to /squashfs-root/www/HNAP1/control/SetMasterWLanSettings...
Dlink Dir-846 Firmware 100a35
8.8
CVSSv3
CVE-2022-46552
D-Link DIR-846 Firmware FW100A53DBR exists to contain a remote command execution (RCE) vulnerability via the lan(0)_dhcps_staticlist parameter. This vulnerability is exploited via a crafted POST request.
Dlink Dir-846 Firmware 100a53dbr
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
type confusion
CVE-2024-20360
CVE-2021-47559
XXE
CVE-2024-5229
CVE-2021-47543
CVE-2021-47571
SSTI
CVE-2024-4978
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »