CVE-2020-9377: D-Link DIR-610 Devices Remote Command Execution
Vulnerability summary
CVE-2020-9377 is a high (CVSS 8.8) OS Command Injection vulnerability in D-Link DIR-610 Devices. It is known to be exploited: CISA lists it, first on 25-03-2022. EPSS estimates a 21.34% chance of exploitation in the next 30 days, higher than 97.5% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 09-07-2020PublishedVulnerability first disclosed.
- 25-03-2022Added to CISA KEVD-Link DIR-610 Devices Remote Command Execution
- 15-04-2022CISA remediation dueThe impacted product is end-of-life and should be disconnected if still in use.
- 21-10-2025Last modifiedVulnerability information updated.
Description
D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST8.8HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
21.34%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 21.34% on 19-09-2026
Known exploited
Compare KEV catalogs
CISA KEVListed- Added
- 25-03-2022
- Federal due date
- 15-04-2022
CISA required action
The impacted product is end-of-life and should be disconnected if still in use. nvd.nist.gov/vuln/detail/CVE-2020-9377
Public exploits
2 found131557F9De7D571F118F59805Df852Dc
Maturity: poc
Exploit Reference (supportannouncement.us.dlink.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Dlink1 product
1 vendor · 1 product
References
4 links- supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10182X Refsource CONFIRMExploitVendor Advisory
- gist.github.com/GouveaHeitor/131557f9de7d571f118f59805df852dcX Refsource MISCBroken LinkExploitPatchThird Party Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-9377Government ResourceUS Government Resource