D-Link DIR-846 Firmware 100A53DLA
Approved changes feed: RSS · Atom
cpe:2.3:o:dlink:dir-846_firmware:100a53dla:*:*:*:*:*:*:*
part: o version: 100a53dla update: *
| Vendor | Dlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44) |
|---|---|
| Product | Dir 846 Firmware (99f06580-d8e7-50a8-88cf-acfc75ef9f37) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-46319 |
vulnerable | 2026-06-08 05:38:03.228092 |
Details available
Remote Code Execution (RCE) vulnerability exists in D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicious users can use this vulnerability to use "\ " or backticks to bypass the shell metacharacters in the ssid0 or ssid1 parameters to execute arbitrary commands.This vulnerability is due to the fact that CVE-2019-17509 is not fully patched and can be bypassed by using line breaks or backticks on its basis.
Published: 2022-02-17T21:27:57.000Z
Updated: 2024-08-04T05:02:10.965Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-46315 |
vulnerable | 2026-06-08 05:38:03.227433 |
Details available
Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetWizardConfig.php in D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicoius users can use this vulnerability to use "\ " or backticks in the shell metacharacters in the ssid0 or ssid1 parameters to cause arbitrary command execution. Since CVE-2019-17510 vulnerability has not been patched and improved www/hnap1/control/setwizardconfig.php, can also use line breaks and backquotes to bypass.
Published: 2022-02-17T21:15:51.000Z
Updated: 2024-08-04T05:02:11.198Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-46314 |
vulnerable | 2026-06-08 05:38:03.225659 |
Details available
A Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetNetworkTomographySettings.php of D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin because backticks can be used for command injection when judging whether it is a reasonable domain name.
Published: 2022-02-17T20:59:18.000Z
Updated: 2024-08-04T05:02:11.058Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.