# CVE-2016-20017

D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as exploited in the wild in 2016 through 2022.

- Page: https://www.vulneraibility.com/cve/CVE-2016-20017
- CVSS: 9.8
- Known exploited: yes, in CISA KEV since 2024-01-08; CISA due date 2024-01-29
- EPSS: 65.78% (percentile 99.3)
- Public exploit code: 1 Metasploit module
- CISA SSVC: exploitation active, automatable yes, technical impact total (assessed 2024-01-05)
- Weakness: CWE-77
- Published: 2022-10-19

## Affected

- dlink:dsl-2750b_firmware

## References

- [other] https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10088
- [other] https://seclists.org/fulldisclosure/2016/Feb/53
- [other] https://www.exploit-db.com/exploits/44760
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-20017

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.