H3XA — Operational Evidence

TypeVulnerability

External ID—

First seen2022-03-25

Last seen2022-03-25

Confidence

—

D-Link DIR-610 devices allow remote code execution via the cmd parameter to command.php.

Labels

exploitedkev

CISA KEV context

Vendor / productD-Link DIR-610 Devices

Added2022-03-25

Due date2022-04-15

6 recorded

Relationships

mitigates

from Remediate CVE-2020-9377

Mitigation

related-to

to Argument Injection

Technique

related-to

to Command Delimiters

Technique

related-to

to Command Line Execution through SQL Injection

Technique

related-to

to Exploiting Multiple Input Interpretation Layers

Technique

related-to

to OS Command Injection

Technique

2 external

References

nvd

CVE-2020-9377

cwe

CWE-78