CVE-2020-9376

HIGH NUCLEI

D-Link DIR-610 Firmware - Information Disclosure via getcfg.php

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2020-9376. PoCs published by renatoalencar. A Nuclei detection template is also available.

AI-analyzed exploit summary The repository contains functional exploit code for CVE-2020-9376, demonstrating authenticated remote command execution (RCE) and credential dumping on D-Link DIR-610 routers. The exploits leverage improper input validation in command.php and getcfg.php endpoints.

Description

D-Link DIR-610 devices allow Information Disclosure via SERVICES=DEVICE.ACCOUNT%0AAUTHORIZED_GROUP=1 to getcfg.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

Exploits (1)

nomisec WORKING POC 4 stars
by renatoalencar · poc
https://github.com/renatoalencar/dlink-dir610-exploits

The repository contains functional exploit code for CVE-2020-9376, demonstrating authenticated remote command execution (RCE) and credential dumping on D-Link DIR-610 routers. The exploits leverage improper input validation in command.php and getcfg.php endpoints.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: D-Link DIR-610
Auth required
Prerequisites: Network access to the target device · Valid authentication credentials (uid cookie)
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Nuclei Templates (1)

D-Link DIR-610 Devices - Information Disclosure
HIGHby whynotke

References (3)

Core 3
Core References
Product, Vendor Advisory x_refsource_misc
https://www.dlink.com.br/produto/dir-610/
Exploit, Patch, Third Party Advisory x_refsource_misc
https://gist.github.com/GouveaHeitor/dcbb67b301cc45adc00f8a6a2a0a590f

Scores

CVSS v3 7.5
EPSS 0.1659
EPSS Percentile 96.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-74
Status published
Products (1)
dlink/dir-610_firmware
Published Jul 09, 2020
Tracked Since Feb 18, 2026