- Vendor / Project
- D-Link
- Product
- DSL-2750B Devices
- Date added
- Jan 8, 2024
- Due date
- Jan 29, 2024
- Known ransomware use
- Unknown
- CWEs
- CWE-77
Description
D-Link DSL-2750B devices contain a command injection vulnerability that allows remote, unauthenticated command injection via the login.cgi cli parameter.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.