January 8, 2024 · Applied Cybernetics Group
CVE-2016-20017 — D-Link DSL-2750B Devices
D-Link DSL-2750B Devices Command Injection Vulnerability
- Added to KEV
2024-01-08- Federal due date
2024-01-29- Vendor
- D-Link
- Product
- DSL-2750B Devices
- EPSS
- 99.7th percentile (score 0.921, as of
2026-06-08) - NVD CVSS v3.1
- —
- Ransomware use
- Unknown
- Upstream
- https://nvd.nist.gov/vuln/detail/CVE-2016-20017
CISA short description
D-Link DSL-2750B devices contain a command injection vulnerability that allows remote, unauthenticated command injection via the login.cgi cli parameter.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.