D-Link DSL-2750B Devices < 1.05 Command Injection (CVE-2016-20017)

D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as exploited in the wild in 2016 through 2022. Note that Nessus has not tested for this issue but has instead relied only on the router's self-reported model. %NASLMINLEVEL 80900 C...

CVE-2016-20017

D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as exploited in the wild in 2016 through 2022...

D-Link DSL-2750B Devices Command Injection Vulnerability

D-Link DSL-2750B devices contain a command injection vulnerability that allows remote, unauthenticated command injection via the login.cgi cli parameter...

CVE-2016-20017

D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as exploited in the wild in 2016 through 2022...

CVE-2016-20017

D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as exploited in the wild in 2016 through 2022...

Command injection

D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as exploited in the wild in 2016 through 2022...

D-Link DSL-2750B 命令注入漏洞

The D-Link DSL-2750B is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DSL-2750B prior to version 1.05. An attacker can exploit this vulnerability to perform remote unauthenticated command injection via the login.cgi-cli parameter...

CVE-2016-20017

D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as exploited in the wild in 2016 through 2022...

CVE-2016-20017

D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as exploited in the wild in 2016 through 2022...

CVE-2016-20017

CVE-2016-20017 affects D-Link DSL-2750B devices prior to firmware version 1.05. The vulnerability allows remote unauthenticated command injection via the login.cgi cli parameter, enabling total compromise of affected routers as described in multiple sources. Exploitation was observed in the wild ...

PT-2022-5286

Name of the Vulnerable Software and Affected Versions D-Link DSL-2750B versions prior to 1.05 Description The issue allows remote unauthenticated command injection via the login.cgi cli parameter. This has been exploited in the wild from 2016 through 2022. The vulnerability is related to the lack...

CVE-2016-20017: Improper Neutralization of Special Elements used in a Command

D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as exploited in the wild in 2016 through 2022...

D-Link DSL-2750B OS Command Injection Vulnerability

The D-Link DSL-2750B is an ADSL router. An OS command injection vulnerability exists in the D-Link DSL-2750B. An attacker can exploit the vulnerability to execute arbitrary commands...

D-Link DSL-2750B OS Command Injection Vulnerability (CNVD-2018-20854)

The D-Link DSL-2750B is an ADSL router. An OS command injection vulnerability exists in the D-Link DSL-2750B. An attacker can exploit the vulnerability to execute arbitrary commands...

DLink #DSL2750B OS Command Injection Exploit

This Metasploit module exploits a remote command injection vulnerability in D-Link DSL-2750B devices. Vulnerability can be exploited through "cli" parameter that is directly used to invoke "ayecli" binary. Vulnerable firmwares are from 1.01 up to 1.03. This module requires Metasploit:...

D-Link DSL-2750B - OS Command Injection (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'D-Link DSL-2750B OS Command Injection', 'Description' = %q This module exploits a remote command injection vulnerability in D-Link DSL-2750B...

D-Link DSL-2750B OS Command Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'D-Link DSL-2750B OS Command Injection', 'Description' = %q This module exploits a remote command injection vulnerability in D-Link DSL-2750B...

D-Link DSL-2750B Arbitrary Command Execution Vulnerability

The D-Link DSL-2750B is a Model router product. A security vulnerability exists in the D-Link DSL-2750B that allows remote attackers to submit a special request to execute arbitrary code and retrieve sensitive information...

D-Link DSL-2750B Remote Command Execution

After some playing around I've noticed something interesting during login phase: by sending wrong credentials, user is redirected on an error page with url http://192.168.1.1:666/login.cgi?cli=access%20login%20encrypted%2041544A25DC00170BA90659AD4CBDD9D9$ http://imgur.com/ZG1vU2t In order to see...

D-Link DSL-2750B OS Command Injection

This module exploits a remote command injection vulnerability in D-Link DSL-2750B devices. Vulnerability can be exploited through "cli" parameter that is directly used to invoke "ayecli" binary. Vulnerable firmwares are from 1.01 up to 1.03. Module Options msf use...