CVE-2020-9376

D-Link DIR-610 devices allow Information Disclosure via SERVICES=DEVICE.ACCOUNT%0AAUTHORIZEDGROUP=1 to getcfg.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2020-9376

creationtimestamp| type| source ---|---|--- 2022-12-12 13:30:07+00:00| seen| https://t.me/truesecator/3813 2022-12-12 21:42:37+00:00| seen| Telegram/mt5nnyxArEOXPMlicgb1bwDVtO405hFY9Gj3IJ8mSii5pg 2024-10-26 01:48:24+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1471...

CVE-2020-9376

D-Link DIR-610 devices have an information disclosure vulnerability exposed through the getcfg.php endpoint by passing SERVICES=DEVICE.ACCOUNT%0AAUTHORIZED_GROUP=1. The issue is described consistently across CVE-2020-9376 references and related scans (e.g., NVD, Nuclei template) as affecting devi...