D-Link DIR-610 Devices Remote Command Execution

ALTO 8.8EXPLOITED (CISA KEV)CVE-2020-9377 · Published 09/07/2020 · updated 17/06/2026

D-Link DIR-610 Devices Remote Command Execution. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 25/03/2022. Patch affected systems as an emergency.

In breve

CVE-2020-9377 è una vulnerabilità ALTO (CVSS 8.8).
Sfruttata attivamente: la CISA l'ha aggiunta al catalogo KEV il 25/03/2022.
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 21.9%, superiore al 97.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
DIR-610 Devices D-Link	Versions not published yet (product named by CISA KEV)

Description

D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

References

gist.github.com/GouveaHeitor/131557f9de7d571f118f59805df852dc · Broken Link
supportannouncement.us.dlink.com/announcement/publication.aspx · Exploit
dlink.com.br/produto/dir-610 · Product
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2020-9377

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free