CVE-2020-9377highunder attackCWE-78

CVE-2020-9377

Published · Updated

Follow this CVE+ Monitor DIR-610 Devices

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

56Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 8.8epss 22%
from disclosure to weapon
Published on NVDJul 9
CISA KEV+624d
Action required by CISAfederal deadline: 2022-04-15

The impacted product is end-of-life and should be disconnected if still in use.

In short

D-Link DIR-610 routers have a flaw that allows attackers to run arbitrary commands remotely by sending specially crafted requests to the device. This is critical because it gives attackers complete control over the router, compromising all network traffic.

Technical detail

Remote command injection vulnerability in D-Link DIR-610's command.php endpoint where the 'cmd' parameter is not properly sanitized, allowing unauthenticated or authenticated attackers to execute arbitrary OS commands with device privileges. Attack vector is network-based via HTTP/HTTPS, and impacts devices no longer receiving security updates.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a