CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-10-19
D-Link DSL-2750B login.cgi Remote Command Injection Vulnerability (CVE-2016-20017) Technical Analysis and Mitigation Guide
[Affected Scope] D-Link DSL-2750B devices running firmware versions prior to 1.05
[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via the 'cli' parameter in login.cgi
[Mitigation] Apply the official firmware patch (v1.05 or later) or immediately disable WAN-side access to the web management interface