CVE-2021-46226: Command Injection

Q: What is the severity of CVE-2021-46226?

CVE-2021-46226 is considered a critical vulnerability due to its potential for remote code execution.

Q: How do I fix CVE-2021-46226?

To fix CVE-2021-46226, it is recommended to upgrade the D-Link DI-7200GV2 firmware to a version higher than 21.04.09E1.

Q: What devices are affected by CVE-2021-46226?

CVE-2021-46226 affects the D-Link DI-7200GV2 device running firmware version 21.04.09E1 and earlier.

Q: What type of vulnerability is CVE-2021-46226?

CVE-2021-46226 is a command injection vulnerability that allows attackers to execute arbitrary commands on the device.

Q: Can CVE-2021-46226 be exploited remotely?

Yes, CVE-2021-46226 can be exploited remotely, making it particularly dangerous for networked devices.

Published Feb 4, 2022

Updated

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function wgettest.asp. This vulnerability allows attackers to execute arbitrary commands via the url parameter.

Affected Software

2 affected components

Dlink Di-7200gv2 Firmware<=21.04.09e1

Dlink Di-7200gv2

Event History

Feb 4, 2022

CVE Published

via MITRE·01:33 AM

Data Sourced

via MITRE·01:33 AM

Description

Frequently Asked Questions

What is the severity of CVE-2021-46226?

CVE-2021-46226 is considered a critical vulnerability due to its potential for remote code execution.

How do I fix CVE-2021-46226?

To fix CVE-2021-46226, it is recommended to upgrade the D-Link DI-7200GV2 firmware to a version higher than 21.04.09E1.

What devices are affected by CVE-2021-46226?

CVE-2021-46226 affects the D-Link DI-7200GV2 device running firmware version 21.04.09E1 and earlier.

What type of vulnerability is CVE-2021-46226?

CVE-2021-46226 is a command injection vulnerability that allows attackers to execute arbitrary commands on the device.

Can CVE-2021-46226 be exploited remotely?