D-Link DIR-846 devices with firmware 100A35 allow remote malicious users to execute arbitrary code as root via HNAP1/control/SetGuestWLanSettings.php.
dlink dir-846_firmware 100a35