D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the lan(0)_dhcps_staticlist parameter. This vulnerability is exploited via a crafted POST request.
References
Link | Resource |
---|---|
http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-846W | Product |
https://github.com/yali-1002/some-poc/blob/main/CVE-2024-44341 | Third Party Advisory |
https://www.dlink.com/en/security-bulletin/ | Not Applicable |
Configurations
Configuration 1 (hide)
AND |
|
History
30 Aug 2024, 14:57
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
Summary |
|
|
CPE | cpe:2.3:o:dlink:dir-846w_firmware:fw100a43:*:*:*:*:*:*:* cpe:2.3:h:dlink:dir-846w:a1:*:*:*:*:*:*:* |
|
First Time |
Dlink dir-846w
Dlink Dlink dir-846w Firmware |
|
References | () http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-846W - Product | |
References | () https://github.com/yali-1002/some-poc/blob/main/CVE-2024-44341 - Third Party Advisory | |
References | () https://www.dlink.com/en/security-bulletin/ - Not Applicable |
27 Aug 2024, 18:35
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
CWE | CWE-78 |
27 Aug 2024, 16:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-08-27 16:15
Updated : 2024-08-30 14:57
NVD link : CVE-2024-44341
Mitre link : CVE-2024-44341
CVE.ORG link : CVE-2024-44341
JSON object : View
Products Affected
dlink
- dir-846w_firmware
- dir-846w
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')