← Vulnerability feed

Vulnerability record · CVE-2023-43284 · published 5 October 2023

CVE-2023-43284: Dlink dir-846 firmware vulnerability

Dlink · Dir 846 Firmware

D-Link Wireless MU-MIMO Gigabit AC1200 Router DIR-846 100A53DBR-Retail devices allow an authenticated remote attacker to execute arbitrary code via an unspecified manipulation of the QoS POST parameter.

8.8 CVSS 3.1 High EPSS 1.9% · top 20.5%
8.8CVSS 3.1 base score
1.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References, 4 tagged exploit
17 Jun 2026Last modified by NVD

Description

D-Link Wireless MU-MIMO Gigabit AC1200 Router DIR-846 100A53DBR-Retail devices allow an authenticated remote attacker to execute arbitrary code via an unspecified manipulation of the QoS POST parameter.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/MateusTesser/CVE-2023-43284 ExploitThird Party Advisory
https://youtu.be/Y8osw_xU6-0 ExploitThird Party Advisory
https://github.com/MateusTesser/CVE-2023-43284 ExploitThird Party Advisory
https://youtu.be/Y8osw_xU6-0 ExploitThird Party Advisory

Track CVE-2023-43284 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.9CVE-2022-46642Dlink dir-846 firmware command injection vulnerabilityD-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the auto_upgrade_hour parameter in the SetAutoUpgradeInfo …EPSS 3.1%9.9CVE-2022-46641Dlink dir-846 firmware command injection vulnerabilityD-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the lan(0)_dhcps_staticlist parameter in the SetIpMacBindS…EPSS 3.1%9.8CVE-2023-33735Dlink dir-846 firmware vulnerabilityD-Link DIR-846 v1.00A52 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter in the /HN…EPSS 33%9.8CVE-2020-21016Dlink dir-846 firmware code injection vulnerabilityD-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary code as root via HNAP1/control/SetGuestWLanSettings.php.EPSS 2.2%9.8CVE-2021-46319Dlink dir-846 firmware os command injection vulnerabilityRemote Code Execution (RCE) vulnerability exists in D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicious users c…EPSS 6.6%9.8CVE-2021-46315Dlink dir-846 firmware os command injection vulnerabilityRemote Command Execution (RCE) vulnerability exists in HNAP1/control/SetWizardConfig.php in D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enF…EPSS 6.6%9.8CVE-2021-46314Dlink dir-846 firmware os command injection vulnerabilityA Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetNetworkTomographySettings.php of D-Link Router DIR-846 DIR846A1_FW100A43.bi…EPSS 33%9.8CVE-2020-27600Dlink dir-846 firmware os command injection vulnerabilityHNAP1/control/SetMasterWLanSettings.php in D-Link D-Link Router DIR-846 DIR-846 A1_100.26 allows remote attackers to execute arbitrary commands via s…EPSS 14%

Source: NIST National Vulnerability Database (record CVE-2023-43284), CISA KEV, FIRST EPSS (scores of 2026-10-02). This page is refreshed as NVD updates the record.