Discontinued D-Link DIR-846 routers are affected by code execution flaws. Replace them!
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-0769 | Unauthenticated Path Traversal in D-Link DIR-859 Router (hedwig.cgi) | 9.8 | 83% | KEVPoC | KEV |
CVE-2024-41622+3 related CVEs | D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter in /HNAP1/… | 9.8 group max | 2% |
From the original article
1 min read at securityaffairs.com
D-Link warns of multiple remote code execution vulnerabilities impacting its discontinued DIR-846 router series. Networking hardware vendor D-Link wars of multiple remote code execution (RCE) vulnerabilities in its discontinued DIR-846 router model. The vulnerabilities CVE-2024-44341 and CVE-2024-44342 (CVSS score of 9.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.