Lucene search

[email protected]CVE-2022-46641

HistoryDec 23, 2022 - 3:15 p.m.

CVE-2022-46641

2022-12-2315:15:15

CWE-77

[email protected]

web.nvd.nist.gov

cve-2022-46641

d-link dir-846

command injection

vulnerability

nvd

9.9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

31.0%

JSON

D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the lan(0)_dhcps_staticlist parameter in the SetIpMacBindSettings function.

Affected configurations

NVD

Node

dlinkdir-846Matcha1

AND

dlinkdir-846_firmwareMatch100a43

CPENameOperatorVersion
dlink:dir-846_firmwaredlink dir-846 firmwareeq100a43

CPE	Name	Operator	Version
dlink:dir-846_firmware	dlink dir-846 firmware	eq	100a43

References

github.com/CyberUnicornIoT/IoTvuln/blob/main/d-link/dir-846/D-Link%20dir-846%20SetIpMacBindSettings%20Command%20Injection%20Vulnerability.md

www.dlink.com/en/security-bulletin/

9.9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

31.0%

JSON

Related for CVE-2022-46641

prion1 nvd1 cvelist1 cnvd1