CVE-2016-20017

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2024-01-08

Reference

https://nvd.nist.gov/vuln/detail/CVE-2016-20017

⚡ RCE ⌖ exploited in the wild shame 65/100 rceexploited-in-wild

D-Link DSL-2750B devices contain a command injection vulnerability that allows remote, unauthenticated command injection via the login.cgi cli parameter.

Players implicated

D-Link · vendor DSL-2750B Devices · product

Description

D-Link DSL-2750B devices contain a command injection vulnerability that allows remote, unauthenticated command injection via the login.cgi cli parameter.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.