High · 8.8 CVE-2024-44340 EUVD-2024-41013GHSA-364c-g6gq-6jw3

D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via keys smartqos_express_devices and …

Published Aug 27, 2024 · Updated Aug 27, 2024 · Assigned by mitre

Description

D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via keys smartqos_express_devices and smartqos_normal_devices in SetSmartQoSSettings.

Advisories 1

WID-SEC-2024-1932 D-LINK Router DIR-846W: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Sep 1, 2024

References

https://www.dlink.com/en/security-bulletin/
http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-846W
https://github.com/yali-1002/some-poc/blob/main/CVE-2024-44340