Critical · 9.9 CVE-2022-46642 EUVD-2022-49446GHSA-62xc-g7hf-p457

D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the auto_upgrade_hour parameter in the SetAutoUp…

Published Dec 23, 2022 · Updated Apr 15, 2025 · Assigned by mitre

Description

D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the auto_upgrade_hour parameter in the SetAutoUpgradeInfo function.

Advisories 1

WID-SEC-2022-2410 D-LINK Router DIR-846: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Dec 26, 2022

References

https://www.dlink.com/en/security-bulletin/
https://github.com/CyberUnicornIoT/IoTvuln/blob/main/d-link/dir-846/D-Link%20dir-846%20SetAutoUpgradeInfo%20command%20injection%20vulnerability.md