CVE-2024-41622

—

CVSS 3.1

9.8 critical

EPSS

2%p80

Published

Aug 27, 2024 (Aug 27, 2024)

Modified

Jun 17, 2026

Description

D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter in /HNAP1/ interface.

Vendors: dlink
Products: dir-846w firmware
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.0%)

In the news1 stories

Discontinued D-Link DIR-846 routers are affected by code execution flaws. Replace them!

Security AffairsSep 4, 14:49 UTC · Sep 4, 2024Vulnerability in the wildCVE-2024-44341 CVE-2024-44342 CVE-2024-41622+2 CVEs