D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the auto_upgrade_hour parameter in the SetAutoUpgradeInfo function.
References
Link | Resource |
---|---|
https://github.com/CyberUnicornIoT/IoTvuln/blob/main/d-link/dir-846/D-Link%20dir-846%20SetAutoUpgradeInfo%20command%20injection%20vulnerability.md | Exploit Third Party Advisory |
https://www.dlink.com/en/security-bulletin/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
30 Dec 2022, 22:27
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:dlink:dir-846_firmware:100a43:*:*:*:*:*:*:* cpe:2.3:h:dlink:dir-846:a1:*:*:*:*:*:*:* |
|
CWE | CWE-77 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.9 |
First Time |
Dlink
Dlink dir-846 Firmware Dlink dir-846 |
|
References | (MISC) https://www.dlink.com/en/security-bulletin/ - Vendor Advisory | |
References | (MISC) https://github.com/CyberUnicornIoT/IoTvuln/blob/main/d-link/dir-846/D-Link%20dir-846%20SetAutoUpgradeInfo%20command%20injection%20vulnerability.md - Exploit, Third Party Advisory |
23 Dec 2022, 16:52
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-12-23 15:15
Updated : 2023-12-10 14:48
NVD link : CVE-2022-46642
Mitre link : CVE-2022-46642
CVE.ORG link : CVE-2022-46642
JSON object : View
Products Affected
dlink
- dir-846_firmware
- dir-846
CWE
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')