Firetruck

CVE-2020-9377

KEV

D-Link DIR-610 Devices Remote Command Execution

View CVE record →
Vendor / Project
D-Link
Product
DIR-610 Devices
Date added
Mar 25, 2022
Due date
Apr 15, 2022
Known ransomware use
Unknown
CWEs
CWE-78

Description

D-Link DIR-610 devices allow remote code execution via the cmd parameter to command.php.

Required action

The impacted product is end-of-life and should be disconnected if still in use.

Notes