CVE-2016-20017 - D-Link DSL-2750B Devices Command Injection Vulnerability
Project:D-Link
Product:DSL-2750B Devices
Date Added:2024-01-08Due Date:2024-01-29
Vulnerability Name
D-Link DSL-2750B Devices Command Injection Vulnerability
Description
D-Link DSL-2750B devices contain a command injection vulnerability that allows remote, unauthenticated command injection via the login.cgi cli parameter.
Known To Be Used in Ransomware Campaigns?
Unknown
Action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Additional Notes
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10088
https://nvd.nist.gov/vuln/detail/CVE-2016-20017