LiveActive security incident?Get immediate response
CVE Record

CVE-2021-46452: D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the...

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNetworkTomographySettings. This vulnerability allows attackers to execute arbitrary commands via the tomography_ping_address, tomography_ping_number, tomography_ping_size, tomography_ping_timeout, and tomography_ping_ttl parameters.

UnknownCVSS not scoredNot KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysisunknown

Security readout for executives and security teams

Plain-English summary

CVE-2021-46452 is a reported command injection issue in D-Link DIR-823-Pro v1.0.2. If an attacker can reach the affected network tomography settings function, they may be able to run arbitrary operating-system commands on the device. Source data does not provide a CVSS score or confirmed exploitation.

Executive priority

Prioritize confirmation if D-Link DIR-823-Pro routers are in use. Command injection on network edge devices can become serious quickly, but the provided evidence lacks scoring, exploitation confirmation, and clear patch details.

Technical view

The CVE describes command injection in SetNetworkTomographySettings affecting tomography_ping_address, tomography_ping_number, tomography_ping_size, tomography_ping_timeout, and tomography_ping_ttl parameters on D-Link DIR-823-Pro v1.0.2. The bundle does not name authentication requirements, attack vector, fixed firmware, or complete affected CPEs.

Likely exposure

Known exposure is limited to environments running D-Link DIR-823-Pro v1.0.2. Risk is higher where router management or diagnostic interfaces are reachable from untrusted networks. The sources do not establish broader D-Link model or firmware impact.

Exploitation context

The CVE is not listed as KEV in the provided bundle. A public GitHub reference is cited, but the bundle does not provide evidence of active exploitation, exploitation scale, or weaponized use in the wild.

Researcher notes

Key gaps are authentication context, reachable interface, CVSS scoring, fixed firmware, and complete affected-version mapping. Treat the GitHub reference as a public technical disclosure, but avoid assuming active exploitation without KEV or corroborating source evidence.

Mitigation direction

  • Check D-Link security bulletin and SAP10285 for vendor remediation guidance.
  • Remove internet exposure from router administration and diagnostic interfaces.
  • Restrict device management access to trusted administrative networks only.
  • Retire or replace devices if no supported fixed firmware is available.
  • Monitor device logs for unusual administrative or diagnostic activity.

Validation and detection

  • Inventory D-Link DIR-823-Pro devices and record firmware versions.
  • Confirm whether any device runs firmware v1.0.2.
  • Review firewall rules for exposed router management interfaces.
  • Check vendor bulletin SAP10285 for current remediation status.
  • Document uncertainty where authentication or fixed-version details are unavailable.
Prepared
Confidence
medium
Sources
5

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

description · low confidence lookup

Execution behavior lookup

The CVE wording references code or command execution, so execution technique review may help defensive triage. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.

Open ATT&CK lookup
cve · low confidence lookup

CVE-2021-46452 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
0Timeline events
0ADP providers
4Source links

CVSS and timeline data

No CVSS vectors or timeline events were available in the normalized CVE source material.

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
n/an/an/aListed
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.