First published: Fri Feb 04 2022(Updated: )
D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetStationSettings. This vulnerability allows attackers to execute arbitrary commands via the station_access_enable parameter.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Dlink Dir-823 Pro Firmware | <=1.0.2 | |
Dlink Dir-823 Pro |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-46455 has a high severity level due to its potential for command injection.
To fix CVE-2021-46455, update your D-Link DIR-823-Pro device firmware to version 1.0.3 or higher.
CVE-2021-46455 is a command injection vulnerability affecting D-Link DIR-823-Pro devices.
CVE-2021-46455 affects the D-Link DIR-823-Pro device running firmware version 1.0.2 or older.
Yes, CVE-2021-46455 can allow attackers to execute arbitrary commands, potentially leading to unauthorized access.