CVE-2022-46642: D-Link Dir-846 Firmware

Critical severity, CVSS 9.9. EPSS: 3.1% chance of exploitation in the next 30 days.

D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the auto_upgrade_hour parameter in the SetAutoUpgradeInfo function.

Affected products

• D-Link Dir-846 Firmware: version 100a43 only

Published 2022-12-23. Last modified 2026-06-17.