PatchTheCVEdir-846 firmware vulnerabilities and fixes
Recent CVEs affecting dir-846 firmware, with upgrade or downgrade steps. 13 tracked.
Also searched as: dir 846 firmware, dir-846firmware.
dir-846 firmware has 13 tracked vulnerabilities, 9 critical. A fixed release or vendor patch exists for 1. Most recent: 2023-12-07. Highest priority: CVE-2021-46314 (score 69/100).
- CVE-2023-6580 HIGH 8.8 MITIGATE A vulnerability, which was classified as critical, was found in D-Link DIR-846 FW100A53DBR
- CVE-2023-43284 HIGH 8.8 MITIGATE D-Link Wireless MU-MIMO Gigabit AC1200 Router DIR-846 100A53DBR-Retail devices allow an authenticated remote a
- CVE-2022-46642 CRITICAL 9.9 MITIGATE D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the auto_upgrade_ho
- CVE-2022-46641 CRITICAL 9.9 MITIGATE D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the lan(0)_dhcps_st
- CVE-2022-46552 HIGH 8.8 MITIGATE D-Link DIR-846 Firmware FW100A53DBR was discovered to contain a remote command execution (RCE) vulnerability v
- CVE-2021-46319 CRITICAL 9.8 MITIGATE Remote Code Execution (RCE) vulnerability exists in D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW
- CVE-2021-46315 CRITICAL 9.8 MITIGATE Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetWizardConfig.php in D-Link Router DIR-
- CVE-2021-46314 CRITICAL 9.8 MITIGATE A Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetNetworkTomographySettings.php of D-L
- CVE-2020-27600 CRITICAL 9.8 MITIGATE HNAP1/control/SetMasterWLanSettings.php in D-Link D-Link Router DIR-846 DIR-846 A1_100.26 allows remote attack
- CVE-2020-21016 CRITICAL 9.8 MITIGATE D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary code as root via HNAP1
- CVE-2019-17510 CRITICAL 9.8 MITIGATE D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary OS commands as root by
- CVE-2019-17509 CRITICAL 9.8 MITIGATE D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary OS commands as root by
- CVE-2018-16408 HIGH 7.2 MITIGATE D-Link DIR-846 devices with firmware 100.26 allow remote attackers to execute arbitrary code as root via a Set
FAQ
How do I fix dir-846 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dir-846 firmware being exploited right now?
None of the tracked dir-846 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dir-846 firmware CVE should I patch first?
CVE-2021-46314 currently ranks highest (69/100): A Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetNetworkTomographySettings.php of D-L.