Vulnerabilities > Dlink > DIR 846 Firmware > 100a53dla
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-02-17 | CVE-2021-46315 | OS Command Injection vulnerability in Dlink Dir-846 Firmware 100A43/100A53Dla Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetWizardConfig.php in D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. | 10.0 |
| 2022-02-17 | CVE-2021-46319 | OS Command Injection vulnerability in Dlink Dir-846 Firmware 100A43/100A53Dla Remote Code Execution (RCE) vulnerability exists in D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. | 10.0 |
| 2022-02-17 | CVE-2021-46314 | OS Command Injection vulnerability in Dlink Dir-846 Firmware 100A43/100A53Dla A Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetNetworkTomographySettings.php of D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin because backticks can be used for command injection when judging whether it is a reasonable domain name. | 7.5 |