D-Link DIR-846W Vulnerable to Remote Command Execution

CVE-2024-44340

What is CVE-2024-44340?

A remote command execution (RCE) vulnerability exists in the D-Link DIR-846W A1 router due to improper handling of the 'smartqos_express_devices' and 'smartqos_normal_devices' keys in the SetSmartQoSSettings function. This flaw allows an attacker to execute arbitrary commands on the vulnerable device remotely. Exploitation of this vulnerability can lead to unauthorized access and control of the affected router, potentially compromising the entire network. Users are advised to check for updates and apply any necessary patches to mitigate this security risk. For more information, consult D-Link’s security bulletins.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References