Critical · 9.9 CVE-2022-46641 EUVD-2022-49445GHSA-23qm-j98q-xr7j

D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the lan(0)_dhcps_staticlist parameter in the Set…

Published Dec 23, 2022 · Updated Apr 15, 2025 · Assigned by mitre

Description

D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the lan(0)_dhcps_staticlist parameter in the SetIpMacBindSettings function.

Advisories 1

WID-SEC-2022-2410 D-LINK Router DIR-846: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Dec 26, 2022

References

https://www.dlink.com/en/security-bulletin/
https://github.com/CyberUnicornIoT/IoTvuln/blob/main/d-link/dir-846/D-Link%20dir-846%20SetIpMacBindSettings%20Command%20Injection%20Vulnerability.md