CVE-2022-46552: D-Link Dir-846 Firmware

High severity, CVSS 8.8. EPSS: 10.5% chance of exploitation in the next 30 days.

D-Link DIR-846 Firmware FW100A53DBR was discovered to contain a remote command execution (RCE) vulnerability via the lan(0)_dhcps_staticlist parameter. This vulnerability is exploited via a crafted POST request.

Affected products

• D-Link Dir-846 Firmware: version 100a53dbr only

Published 2023-02-02. Last modified 2026-06-17.