CVE-2024-44342: D-Link Dir-846w Firmware

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the wl(0).(0)_ssid parameter. This vulnerability is exploited via a crafted POST request.

Affected products

• D-Link Dir-846w Firmware: version fw100a43 only

Published 2024-08-27. Last modified 2026-06-17.