CVE-2023-33735: D-Link Dir-846 Firmware

Critical severity, CVSS 9.8. EPSS: 31.6% chance of exploitation in the next 30 days.

D-Link DIR-846 v1.00A52 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter in the /HNAP1 interface.

Affected products

• D-Link Dir-846 Firmware: version 100a52 only

Published 2023-05-31. Last modified 2026-06-17.