← Vulnerability feed

Vulnerability record · CVE-2021-46315 · published 17 February 2022

CVE-2021-46315: Dlink dir-846 firmware os command injection vulnerability

Dlink · Dir 846 Firmware

Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetWizardConfig.php in D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicoius users can use this vulnerability to use "\ " or backticks in the shell metacharacters in the ssid0 or ssid1 parameters to cause arbitrary command execution. Since CVE-2019-17510 vulnerability has not been patched and improved www/hnap1/control/setwizardconfig.php, can also use line breaks and backquotes to bypass.

9.8 CVSS 3.1 Critical EPSS 6.6% · top 6.4% CWE-78 · OS command injection
9.8CVSS 3.1 base score, v2 10.0
6.6%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetWizardConfig.php in D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicoius users can use this vulnerability to use "\ " or backticks in the shell metacharacters in the ssid0 or ssid1 parameters to cause arbitrary command execution. Since CVE-2019-17510 vulnerability has not been patched and improved www/hnap1/control/setwizardconfig.php, can also use line breaks and backquotes to bypass.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/doudoudedi/DIR-846_Command_Injection/blob/main/DIR-846_Command_Injection1.md ExploitThird Party Advisory
https://www.dlink.com/en/security-bulletin/ Vendor Advisory
https://github.com/doudoudedi/DIR-846_Command_Injection/blob/main/DIR-846_Command_Injection1.md ExploitThird Party Advisory
https://www.dlink.com/en/security-bulletin/ Vendor Advisory

Track CVE-2021-46315 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.9CVE-2022-46642Dlink dir-846 firmware command injection vulnerabilityD-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the auto_upgrade_hour parameter in the SetAutoUpgradeInfo …EPSS 3.1%9.9CVE-2022-46641Dlink dir-846 firmware command injection vulnerabilityD-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the lan(0)_dhcps_staticlist parameter in the SetIpMacBindS…EPSS 3.1%9.8CVE-2023-33735Dlink dir-846 firmware vulnerabilityD-Link DIR-846 v1.00A52 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter in the /HN…EPSS 33%9.8CVE-2020-21016Dlink dir-846 firmware code injection vulnerabilityD-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary code as root via HNAP1/control/SetGuestWLanSettings.php.EPSS 2.2%9.8CVE-2021-46319Dlink dir-846 firmware os command injection vulnerabilityRemote Code Execution (RCE) vulnerability exists in D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicious users c…EPSS 6.6%9.8CVE-2021-46314Dlink dir-846 firmware os command injection vulnerabilityA Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetNetworkTomographySettings.php of D-Link Router DIR-846 DIR846A1_FW100A43.bi…EPSS 33%9.8CVE-2020-27600Dlink dir-846 firmware os command injection vulnerabilityHNAP1/control/SetMasterWLanSettings.php in D-Link D-Link Router DIR-846 DIR-846 A1_100.26 allows remote attackers to execute arbitrary commands via s…EPSS 14%9.8CVE-2019-17509Dlink dir-846 firmware os command injection vulnerabilityD-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary OS commands as root by leveraging admin access and sending a …EPSS 3.5%

Source: NIST National Vulnerability Database (record CVE-2021-46315), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.