D-Link DIR-610 Devices Remote Command Execution

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Jul 9, 2020 · Catalog

   Detected

   D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

2. Mar 25, 2022 · CISA KEV

   Known exploited

   The impacted product is end-of-life and should be disconnected if still in use.

3. Apr 15, 2022 · CISA KEV

   Remediation due

   The impacted product is end-of-life and should be disconnected if still in use.

4. Jun 16, 2026 · Catalog

   Updated

   D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

Affected

• cpe dlink/dir-610 firmwareversion unspecified
• vendor D-Link DIR-610 Devicesversion unspecified

Sources

• CISA KEVConfirmed exploitationCVE-2020-9377

  D-Link DIR-610 devices allow remote code execution via the cmd parameter to command.php.

  cisa.gov
• CVE.orgVulnerability recordCVE-2020-9377

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2020-9377

  30-day exploitation probability 21.3%

  first.org
• NIST NVDVulnerability recordCVE-2020-9377

  D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

  nvd.nist.gov

References

• Broken Link · gist.github.com
• CISA note · nvd.nist.gov
• Exploit · supportannouncement.us.dlink.com
• US Government Resource · cisa.gov
• Product · dlink.com.br