coldbraid

CVE-2016-20017 D-Link DSL-2750B Devices

D-Link DSL-2750B devices contain a command injection vulnerability that allows remote, unauthenticated command injection via the login.cgi cli parameter.

CVSS
not scored

CWE-77

On CISA’s exploited list

D-Link DSL-2750B Devices Command Injection Vulnerability

Added
2024-01-08
Federal patch deadline
2024-01-29
Ransomware use
not known