{"cvss":9.8,"datePublished":"2024-01-08","dateUpdated":"2024-01-08","description":"D-Link DSL-2750B devices contain a command injection vulnerability that allows remote, unauthenticated command injection via the login.cgi cli parameter.","dueDate":"2024-01-29","id":"CVE-2016-20017","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10088; https://nvd.nist.gov/vuln/detail/CVE-2016-20017","product":"DSL-2750B Devices","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"CRITICAL","source":"cisa_known_exploited","title":"D-Link DSL-2750B Devices Command Injection Vulnerability","vendor":"D-Link"}