Live › vulnerability › CVE-2020-9377
Go to dashboardD-Link DIR-610 routers accept a cmd parameter at command.php that runs operating system commands without authentication checks. An attacker who can reach the router can run arbitrary commands on it and take control of the device.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
The impacted product is end-of-life and should be disconnected if still in use.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| D-Link DIR-610 Devices | vendor | – | – |
Identify any D-Link DIR-610 in the network, including its firmware version and whether its web admin interface is reachable from outside.
Disconnect the DIR-610 from the network if it is still in use, as CISA directs because the product is end-of-life.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
D-Link DIR-610 devices allow remote code execution via the cmd parameter to command.php.
CISA required action: The impacted product is end-of-life and should be disconnected if still in use.
This page as .md · .json · in your agent: get_signal("CVE-2020-9377")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.