Unscored CVE-2021-46455 EUVD-2021-33131GHSA-jp3q-vh5x-qvf2

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetStationSettings. Thi…

Published Feb 4, 2022 · Updated Aug 4, 2024 · Assigned by mitre

Description

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetStationSettings. This vulnerability allows attackers to execute arbitrary commands via the station_access_enable parameter.

References

https://www.dlink.com/en/security-bulletin/
https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_22/22.md
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10285