CVE-2021-46452
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNetworkTomographySettings. This vulnerability allows attackers to execute arbitrary commands via the tomography_ping_address, tomography_ping_number, tomography_ping_size, tomography_ping_timeout, and tomography_ping_ttl parameters.
Se ha detectado que el dispositivo D-Link DIR-823-Pro versión v1.0.2, contiene una vulnerabilidad de inyección de comandos en la función SetNetworkTomographySettings. Esta vulnerabilidad permite a atacantes ejecutar comandos arbitrarios por medio de los parámetros tomography_ping_address, tomography_ping_number, tomography_ping_size, tomography_ping_timeout y tomography_ping_ttl
CVSS Scores
SSVC
- Decision:-
Timeline
- 2022-01-24 CVE Reserved
- 2022-02-04 CVE Published
- 2024-08-04 CVE Updated
- 2024-10-20 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
CAPEC
References (3)
URL | Tag | Source |
---|---|---|
https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_27/27.md | Broken Link |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10285 | 2022-03-10 | |
https://www.dlink.com/en/security-bulletin | 2022-03-10 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Dlink Search vendor "Dlink" | Dir-823 Pro Firmware Search vendor "Dlink" for product "Dir-823 Pro Firmware" | <= 1.0.2 Search vendor "Dlink" for product "Dir-823 Pro Firmware" and version " <= 1.0.2" | - |
Affected
| in | Dlink Search vendor "Dlink" | Dir-823 Pro Search vendor "Dlink" for product "Dir-823 Pro" | - | - |
Safe
|