CVE-2023-33735

D-Link DIR-846 v1.00A52 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter in the /HNAP1 interface.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-05-31

Last modified

2025-01-10

Affected products

• Dir-846 Firmware (Dlink)

References

• https://github.com/Tyaoo/IoT-Vuls/blob/main/dlink/DIR-846/vul.md
• https://www.dlink.com/en/security-bulletin/