Cybersecurity Alerts

D-Link DSL-2750B Devices Command Injection Vulnerability

D-Link DSL-2750B devices contain a command injection vulnerability that allows remote, unauthenticated command injection via the login.cgi cli parameter.

Required Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Weakness Classification

CWE-77

References

• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10088
• https://nvd.nist.gov/vuln/detail/CVE-2016-20017