CVE-2023-33735 - D-Link DIR-846 v1.00A52 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter in the /HNAP1 interface

Back Back to CVE browser

CRITICAL

D-Link DIR-846 v1.00A52 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter in the /HNAP1 interface

Published May 31, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 31.56%

Description

D-Link DIR-846 v1.00A52 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter in the /HNAP1 interface.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-37888
Advisory
https://github.com/Tyaoo/IoT-Vuls/blob/main/dlink/DIR-846/vul.md
ExploitThird Party Advisory
https://www.dlink.com/en/security-bulletin/
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-37888		Advisory
https://github.com/Tyaoo/IoT-Vuls/blob/main/dlink/DIR-846/vul.md		ExploitThird Party Advisory
https://www.dlink.com/en/security-bulletin/		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 31, 2023

Updated Jan 10, 2025

Reserved May 22, 2023

Link CVE-2023-33735

CISA Vulnrichment

Updated Jan 10, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-33735

Red Hat

No data

ENISA EUVD

Assigner mitre

Published May 31, 2023

Updated Jan 10, 2025

Link EUVD-2023-37888

GitHub

No data