What’s Vulnerable › Vulnerabilities

CVE-2020-9376

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 16.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-07-09 · updated 2026-06-17
• Weakness: CWE-74

Description

D-Link DIR-610 devices allow Information Disclosure via SERVICES=DEVICE.ACCOUNT%0AAUTHORIZED_GROUP=1 to getcfg.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

Affected products

• Dlink Dir-610 Firmware: all versions

References

• https://gist.github.com/GouveaHeitor/dcbb67b301cc45adc00f8a6a2a0a590f
• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10182
• https://www.dlink.com.br/produto/dir-610/
• https://gist.github.com/GouveaHeitor/dcbb67b301cc45adc00f8a6a2a0a590f
• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10182
• https://www.dlink.com.br/produto/dir-610/

Get alerted when CVE-2020-9376 or the next vulnerability affects your stack