PT-2022-1645 · D Link · D-Link Dir-846

Published 2022-02-17 · Updated 2022-02-25 · CVE-2021-46319

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DIR-846 versions DIR846A1 FW100A43.bin through DIR846enFW100A53DLA-Retail.bin

Description The issue is related to insufficient argument checking in the firmware of D-Link DIR-846 routers, allowing remote attackers to execute arbitrary commands. This can be achieved by bypassing shell metacharacters in the ssid0 or ssid1 parameters using line breaks or backticks. The vulnerability exists due to an incomplete patch for a previous issue.

Recommendations For versions DIR846A1 FW100A43.bin through DIR846enFW100A53DLA-Retail.bin, consider restricting access to the vulnerable parameters ssid0 and ssid1 to minimize the risk of exploitation. As a temporary workaround, avoid using backticks or line breaks in these parameters until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2022-00894

CVE-2021-46319

Affected Products

D-Link Dir-846

References · 7

• 🔥 https://github.com/doudoudedi/DIR-846_Command_Injection/blob/main/DIR-846_Command_Injection1.md · Exploit
• https://dlink.com/en/security-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-46319 · Security Note
• https://osv.dev/vulnerability/CVE-2021-46319 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-00894 · Security Note
• https://t.me/cvenotify/26953 · Telegram Post
• https://t.me/cibsecurity/37680 · Telegram Post