Critical · 9.8 CVE-2023-33735 EUVD-2023-37888GHSA-fwc5-f8jq-qgh2

D-Link DIR-846 v1.00A52 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter …

Published May 31, 2023 · Updated Jan 10, 2025 · Assigned by mitre

Description

D-Link DIR-846 v1.00A52 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter in the /HNAP1 interface.

References

https://www.dlink.com/en/security-bulletin/
https://github.com/Tyaoo/IoT-Vuls/blob/main/dlink/DIR-846/vul.md