What’s Vulnerable › Vulnerabilities

CVE-2020-9377: D-Link DIR-610 Devices Remote Command Execution

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2022-03-25
• EPSS: 21.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-07-09 · updated 2026-06-17
• Weakness: CWE-78

Description

D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

Affected products

• Dlink Dir-610 Firmware: all versions

References

• https://gist.github.com/GouveaHeitor/131557f9de7d571f118f59805df852dc
• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10182
• https://www.dlink.com.br/produto/dir-610/
• https://gist.github.com/GouveaHeitor/131557f9de7d571f118f59805df852dc
• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10182
• https://www.dlink.com.br/produto/dir-610/
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-9377

Get alerted when CVE-2020-9377 or the next vulnerability affects your stack