CVE-2021-46229: Command Injection

Q: What is the severity of CVE-2021-46229?

CVE-2021-46229 is classified as a high severity vulnerability due to its potential for remote command execution.

Q: How do I fix CVE-2021-46229?

To fix CVE-2021-46229, users should update the D-Link DI-7200GV2 firmware to version 21.04.09E1 or later.

Q: What devices are affected by CVE-2021-46229?

CVE-2021-46229 specifically affects D-Link DI-7200GV2 devices running firmware version 21.04.09E1 or earlier.

Q: Can CVE-2021-46229 be exploited remotely?

Yes, CVE-2021-46229 can be exploited remotely by an attacker through the web interface.

Q: What type of vulnerability is CVE-2021-46229?

CVE-2021-46229 is a command injection vulnerability that allows execution of arbitrary commands through the usb_paswd.asp function.

Published Feb 4, 2022

Updated

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function usbpaswd.asp. This vulnerability allows attackers to execute arbitrary commands via the name parameter.

Affected Software

2 affected components

Dlink Di-7200gv2 Firmware<=21.04.09e1

Dlink Di-7200gv2

Event History

Feb 4, 2022

CVE Published

via MITRE·01:33 AM

Data Sourced

via MITRE·01:33 AM

Description

Frequently Asked Questions

What is the severity of CVE-2021-46229?

CVE-2021-46229 is classified as a high severity vulnerability due to its potential for remote command execution.

How do I fix CVE-2021-46229?

To fix CVE-2021-46229, users should update the D-Link DI-7200GV2 firmware to version 21.04.09E1 or later.

What devices are affected by CVE-2021-46229?

CVE-2021-46229 specifically affects D-Link DI-7200GV2 devices running firmware version 21.04.09E1 or earlier.

Can CVE-2021-46229 be exploited remotely?

Yes, CVE-2021-46229 can be exploited remotely by an attacker through the web interface.

What type of vulnerability is CVE-2021-46229?