D-Link DIR-846W A1 FW100A43 Vulnerable to Remote Command Execution

CVE-2024-44341

Summary

A remote command execution (RCE) vulnerability was identified in the D-Link DIR-846W A1 router firmware version FW100A43. This security flaw is triggered by manipulating the lan(0)_dhcps_staticlist parameter through a crafted POST request. Exploitation of this vulnerability allows an attacker to execute arbitrary commands on the affected device, potentially leading to unauthorized control and manipulation of network settings. Users are strongly advised to remain vigilant and implement necessary updates to secure their devices against potential attacks. For further information, refer to D-Link's official security bulletin.

References