CVE-2024-44340: D-Link Dir-846w Firmware

High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days.

D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via keys smartqos_express_devices and smartqos_normal_devices in SetSmartQoSSettings.

Affected products

  • D-Link Dir-846w Firmware: version fw100a43 only

Published 2024-08-27. Last modified 2026-06-17.