CVE-2016-20017
DL
D-Link DSL-2750B Devices
D-Link DSL-2750B Devices Command Injection Vulnerability
What it is
D-Link DSL-2750B devices contain a command injection vulnerability that allows remote, unauthenticated command injection via the login.cgi cli parameter.
What to do
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
- supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10088
- nvd.nist.gov/vuln/detail/CVE-2016-20017
Description and required action as published by CISA. Full record at NVD.
Other D-Link entries on the list
- DIR-823X D-Link DIR-823X Command Injection Vulnerability CVE-2025-29635 · Apr 24, 2026
- Routers D-Link Routers Buffer Overflow Vulnerability CVE-2022-37055 · Dec 8, 2025
- DNR-322L D-Link DNR-322L Download of Code Without Integrity Check Vulnerability CVE-2022-40799 · Aug 5, 2025
- DCS-2530L and DCS-2670L Devices D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability CVE-2020-25079 · Aug 5, 2025
- DCS-2530L and DCS-2670L Devices D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability CVE-2020-25078 · Aug 5, 2025
- DIR-859 Router D-Link DIR-859 Router Path Traversal Vulnerability CVE-2024-0769 · Jun 25, 2025