← Vulnerability feed

Vulnerability record · CVE-2020-27600 · published 2 April 2021

CVE-2020-27600: Dlink dir-846 firmware os command injection vulnerability

Dlink · Dir 846 Firmware

HNAP1/control/SetMasterWLanSettings.php in D-Link D-Link Router DIR-846 DIR-846 A1_100.26 allows remote attackers to execute arbitrary commands via shell metacharacters in the ssid0 or ssid1 parameter.

9.8 CVSS 3.1 Critical EPSS 14% · top 3.6% CWE-78 · OS command injection
9.8CVSS 3.1 base score, v2 10.0
14%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

HNAP1/control/SetMasterWLanSettings.php in D-Link D-Link Router DIR-846 DIR-846 A1_100.26 allows remote attackers to execute arbitrary commands via shell metacharacters in the ssid0 or ssid1 parameter.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/pwnninja/dlink/blob/main/DIR-846_SetMasterWLanSettingsCI.md ExploitThird Party Advisory
https://www.dlink.com Vendor Advisory
https://www.dlink.com/en/security-bulletin/ Vendor Advisory
https://github.com/pwnninja/dlink/blob/main/DIR-846_SetMasterWLanSettingsCI.md ExploitThird Party Advisory
https://www.dlink.com Vendor Advisory
https://www.dlink.com/en/security-bulletin/ Vendor Advisory

Track CVE-2020-27600 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.9CVE-2022-46642Dlink dir-846 firmware command injection vulnerabilityD-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the auto_upgrade_hour parameter in the SetAutoUpgradeInfo …EPSS 3.1%9.9CVE-2022-46641Dlink dir-846 firmware command injection vulnerabilityD-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the lan(0)_dhcps_staticlist parameter in the SetIpMacBindS…EPSS 3.1%9.8CVE-2023-33735Dlink dir-846 firmware vulnerabilityD-Link DIR-846 v1.00A52 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter in the /HN…EPSS 33%9.8CVE-2020-21016Dlink dir-846 firmware code injection vulnerabilityD-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary code as root via HNAP1/control/SetGuestWLanSettings.php.EPSS 2.2%9.8CVE-2021-46315Dlink dir-846 firmware os command injection vulnerabilityRemote Command Execution (RCE) vulnerability exists in HNAP1/control/SetWizardConfig.php in D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enF…EPSS 6.6%9.8CVE-2021-46319Dlink dir-846 firmware os command injection vulnerabilityRemote Code Execution (RCE) vulnerability exists in D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicious users c…EPSS 6.6%9.8CVE-2021-46314Dlink dir-846 firmware os command injection vulnerabilityA Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetNetworkTomographySettings.php of D-Link Router DIR-846 DIR846A1_FW100A43.bi…EPSS 33%9.8CVE-2019-17509Dlink dir-846 firmware os command injection vulnerabilityD-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary OS commands as root by leveraging admin access and sending a …EPSS 3.5%

Source: NIST National Vulnerability Database (record CVE-2020-27600), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.