# CVE-2020-9377

D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

- Page: https://www.vulneraibility.com/cve/CVE-2020-9377
- CVSS: 8.8
- Known exploited: yes, in CISA KEV since 2022-03-25; CISA due date 2022-04-15
- EPSS: 21.89% (percentile 97.7)
- CISA SSVC: exploitation active, automatable no, technical impact total (assessed 2025-02-03)
- Weakness: CWE-78
- Published: 2020-07-09

## Affected

- dlink:dir-610_firmware

## References

- [other] https://www.dlink.com.br/produto/dir-610/
- [other] https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10182
- [other] https://gist.github.com/GouveaHeitor/131557f9de7d571f118f59805df852dc
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-9377

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.