CVE-2020-9377

D-Link DIR-610 is affected by CVE-2020-9377, a remote code execution vulnerability in the cmd parameter of command.php. The issue affects devices that are no longer supported by the maintainer. Connected sources corroborate additional vulnerabilities in the same device family (e.g., information d...

CVE-2020-9376

D-Link DIR-610 devices have an information disclosure vulnerability exposed through the getcfg.php endpoint by passing SERVICES=DEVICE.ACCOUNT%0AAUTHORIZED_GROUP=1. The issue is described consistently across CVE-2020-9376 references and related scans (e.g., NVD, Nuclei template) as affecting devi...

CVE-2018-25115

Multiple D-Link DIR-series routers (DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, DIR-815) are affected by a remote code execution vulnerability in the /service.cgi endpoint. The flaw stems from improper input handling in the EVENT=CHECKFW parameter, which is passed directly to the system...