CVE-2024-44341: OS Command Injection

Published Aug 27, 2024

Updated

D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the lan(0)dhcpsstaticlist parameter. This vulnerability is exploited via a crafted POST request.

Affected Software

2 affected components

All of the following

Dlink Dir-846w Firmware=fw100a43

Dlink Dir-846w=a1

Event History

Aug 27, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-44341?

CVE-2024-44341 is classified as a high severity vulnerability due to its potential for remote command execution.

How do I fix CVE-2024-44341?

To fix CVE-2024-44341, you should update your D-Link DIR-846W A1 FW100A43 firmware to the latest version provided by D-Link.

What does CVE-2024-44341 exploit?

CVE-2024-44341 can be exploited via a crafted POST request that targets the lan(0)_dhcps_staticlist parameter.

Who is affected by CVE-2024-44341?

CVE-2024-44341 affects users with the D-Link DIR-846W A1 running firmware version FW100A43.

What can attackers do with CVE-2024-44341?

Attackers can execute arbitrary commands on the D-Link DIR-846W A1 device if CVE-2024-44341 is successfully exploited.