D-Link Dir-846w Firmware vulnerabilities

4 CVEs affecting D-Link Dir-846w Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-44342, published 2024-08-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-41622, published 2024-08-27. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter in /HNAP1/ interface.
CVE-2024-44342, published 2024-08-27. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the wl(0).(0)_ssid parameter. This vulnerability is exploited via a crafted POST request.
CVE-2024-44341, published 2024-08-27. Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days. D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the lan(0)_dhcps_staticlist parameter. This vulnerability is exploited via a crafted POST…
CVE-2024-44340, published 2024-08-27. High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days. D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via keys smartqos_express_devices and smartqos_normal_devices in SetSmartQoSSettings.