CVE-2018-16408

https://notcve.org/view.php?id=CVE-2018-16408

D-Link DIR-846 devices with firmware 100.26 allow remote attackers to execute arbitrary code as root via a SetNetworkTomographySettings request by leveraging admin access. Los dispositivos D-Link DIR-846 con firmware en versiones 100.26 permiten que atacantes remotos ejecuten código arbitrario como root mediante una petición SetNetworkTomographySettings aprovechando el acceso de administrador. • https://github.com/PAGalaxyLab/VulInfo/blob/master/D-Link%20DIR-846%20RCE.md https://github.com/PAGalaxyLab/VulInfo/blob/master/D-Link/DIR-846/RCE_0/D-Link%20DIR-846%20RCE.md https://www.us-cert.gov/ncas/bulletins/SB18-253 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •