Vulnerabilities > Dlink > DIR 610 Firmware

DATE CVE VULNERABILITY TITLE RISK
2020-07-09 CVE-2020-9377 OS Command Injection vulnerability in Dlink Dir-610 Firmware
D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php.
network
low complexity
dlink CWE-78
8.8
8.8
2020-07-09 CVE-2020-9376 Injection vulnerability in Dlink Dir-610 Firmware
D-Link DIR-610 devices allow Information Disclosure via SERVICES=DEVICE.ACCOUNT%0AAUTHORIZED_GROUP=1 to getcfg.php.
network
low complexity
dlink CWE-74
7.5
7.5