CVE-2016-20017

D-Link DSL-2750B Devices Command Injection Vulnerability

Dsl-2750B Firmware

D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as exploited in the wild in 2016 through 2022.

19. Okt 2022

Ausgewertete Quellen

• Hersteller
  https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10088
• Hinweis
  https://seclists.org/fulldisclosure/2016/Feb/53
• Hinweis
  https://www.exploit-db.com/exploits/44760
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-20017
• CISA
  D-Link DSL-2750B Devices Command Injection Vulnerability
• NVD
  CVE-2016-20017