GCVE - cpe:2.3:h:dlink:dir-846:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:dlink:dir-846:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Dlink (`b610c9ff-f722-5d9d-a6df-9bee7f4d4b44`)
Product	Dir 846 (`84667a4a-740c-5342-9cca-1a11c1cabffe`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-6580`	not_vulnerable	2026-06-08 06:21:54.983801	D-Link DIR-846 QoS POST deserialization HIGH (8.8) A vulnerability, which was classified as critical, was found in D-Link DIR-846 FW100A53DBR. This affects an unknown part of the file /HNAP1/ of the component QoS POST Handler. The manipulation of the argument smartqos_express_devices/smartqos_normal_devices leads to deserialization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-247161 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Published: 2023-12-07T21:31:05.210Z Updated: 2024-08-02T08:35:14.765Z Open on db.gcve.eu Reference links https://vuldb.com/?id.247161 https://vuldb.com/?ctiid.247161 https://github.com/c2dc/cve-reported/blob/main/CVE-2023-6580/CVE-2023-6580.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-43284`	not_vulnerable	2026-06-08 06:11:11.100243	Details available D-Link Wireless MU-MIMO Gigabit AC1200 Router DIR-846 100A53DBR-Retail devices allow an authenticated remote attacker to execute arbitrary code via an unspecified manipulation of the QoS POST parameter. Published: 2023-10-05T00:00:00.000Z Updated: 2024-09-19T19:28:05.546Z Open on db.gcve.eu Reference links https://youtu.be/Y8osw_xU6-0 https://github.com/MateusTesser/CVE-2023-43284	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-33735`	not_vulnerable	2026-06-08 06:06:23.394118	Details available D-Link DIR-846 v1.00A52 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter in the /HNAP1 interface. Published: 2023-05-31T00:00:00.000Z Updated: 2025-01-10T14:57:45.763Z Open on db.gcve.eu Reference links https://www.dlink.com/en/security-bulletin/ https://github.com/Tyaoo/IoT-Vuls/blob/main/dlink/DIR-846/vul.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-46552`	not_vulnerable	2026-06-08 05:50:39.006361	Details available D-Link DIR-846 Firmware FW100A53DBR was discovered to contain a remote command execution (RCE) vulnerability via the lan(0)_dhcps_staticlist parameter. This vulnerability is exploited via a crafted POST request. Published: 2023-02-02T00:00:00.000Z Updated: 2025-03-27T14:05:48.085Z Open on db.gcve.eu Reference links https://cwe.mitre.org/data/definitions/78.html https://www.dlink.com/en/security-bulletin/ https://github.com/FloeDesignTechnologies/phpcs-security-audit/blob/master/Security/Sniffs/BadFunctions/SystemExecFunctionsSniff.php https://www.php.net/manual/en/ref.exec.php https://francoataffarel.medium.com/cve-2022-46552-d-link-dir-846-wireless-router-in-firmware-fw100a53dbr-retail-has-a-vulnerability-5b4ca1864c6e	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-46319`	not_vulnerable	2026-06-08 05:38:03.228203	Details available Remote Code Execution (RCE) vulnerability exists in D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicious users can use this vulnerability to use "\ " or backticks to bypass the shell metacharacters in the ssid0 or ssid1 parameters to execute arbitrary commands.This vulnerability is due to the fact that CVE-2019-17509 is not fully patched and can be bypassed by using line breaks or backticks on its basis. Published: 2022-02-17T21:27:57.000Z Updated: 2024-08-04T05:02:10.965Z Open on db.gcve.eu Reference links https://www.dlink.com/en/security-bulletin/ https://github.com/doudoudedi/DIR-846_Command_Injection/blob/main/DIR-846_Command_Injection1.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-46315`	not_vulnerable	2026-06-08 05:38:03.227454	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-46314`	not_vulnerable	2026-06-08 05:38:03.226736	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-27600`	not_vulnerable	2026-06-08 05:23:52.803798	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-21016`	not_vulnerable	2026-06-08 05:22:30.654041	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-17510`	not_vulnerable	2026-06-08 05:13:10.579124	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-17509`	not_vulnerable	2026-06-08 05:13:10.578715	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-16408`	not_vulnerable	2026-06-08 05:11:04.821992	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.