High · 8.8 CVE-2024-44341 EUVD-2024-41014GHSA-3qv5-2hqj-p2wq

D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the lan(0)_dhcps_staticlist parame…

Published Aug 27, 2024 · Updated Aug 27, 2024 · Assigned by mitre

Description

D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the lan(0)_dhcps_staticlist parameter. This vulnerability is exploited via a crafted POST request.

Advisories 1

WID-SEC-2024-1932 D-LINK Router DIR-846W: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Sep 1, 2024

References

https://www.dlink.com/en/security-bulletin/
http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-846W
https://github.com/yali-1002/some-poc/blob/main/CVE-2024-44341