CVE-2021-46455

Name of the Vulnerable Software and Affected Versions D-Link DIR-823-Pro version 1.0.2

Description The issue is related to the implementation of the SetStationSettings() function in the D-Link DIR-823-Pro wireless router's firmware, which is associated with insufficient input data sanitization when processing the station access enable parameter. This can allow a remote attacker to execute arbitrary commands.

Recommendations For D-Link DIR-823-Pro version 1.0.2, consider disabling the SetStationSettings() function until a patch is available to prevent exploitation via the station access enable parameter. Restrict access to the vulnerable function to minimize the risk of arbitrary command execution. Avoid using the station access enable parameter in the affected function until the issue is resolved.