High · 8.8 CVE-2024-41622 EUVD-2024-39107GHSA-p6m4-jqc8-546h

D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parame…

Published Aug 27, 2024 · Updated Aug 27, 2024 · Assigned by mitre

Description

D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter in /HNAP1/ interface.

Advisories 1

WID-SEC-2024-1932 D-LINK Router DIR-846W: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Sep 1, 2024

References

https://www.dlink.com/en/security-bulletin/
http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-846W
https://github.com/yali-1002/some-poc/blob/main/CVE-2024-41622