D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via keys smartqos_express_devices and smartqos_normal_devices in SetSmartQoSSettings.
References
Link | Resource |
---|---|
http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-846W | Product |
https://github.com/yali-1002/some-poc/blob/main/CVE-2024-44340 | Third Party Advisory |
https://www.dlink.com/en/security-bulletin/ | Not Applicable |
Configurations
Configuration 1 (hide)
AND |
|
History
30 Aug 2024, 14:56
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
|
References | () http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-846W - Product | |
References | () https://github.com/yali-1002/some-poc/blob/main/CVE-2024-44340 - Third Party Advisory | |
References | () https://www.dlink.com/en/security-bulletin/ - Not Applicable | |
CPE | cpe:2.3:o:dlink:dir-846w_firmware:fw100a43:*:*:*:*:*:*:* cpe:2.3:h:dlink:dir-846w:a1:*:*:*:*:*:*:* |
|
First Time |
Dlink dir-846w
Dlink Dlink dir-846w Firmware |
27 Aug 2024, 18:35
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-78 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
27 Aug 2024, 16:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-08-27 16:15
Updated : 2024-08-30 14:56
NVD link : CVE-2024-44340
Mitre link : CVE-2024-44340
CVE.ORG link : CVE-2024-44340
JSON object : View
Products Affected
dlink
- dir-846w_firmware
- dir-846w
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')