https://pwn.watch/i/d-link-dsl-2750b-devices-cve-2016-20017 D-Link DSL-2750B devices contain a command injection vulnerability that allows remote, unauthenticated command injection via the login.cgi cli parameter. Added to the CISA KEV catalog on 2024-01-08. CVE-2016-20017 was assigned before 2024; the KEV listing came in 2024. en Mon, 08 Jan 2024 00:00:00 GMT https://pwn.watch/i/d-link-dsl-2750b-devices-cve-2016-20017 https://pwn.watch/i/d-link-dsl-2750b-devices-cve-2016-20017#2024-01-08-0bd4c04c Mon, 08 Jan 2024 00:00:00 GMT critical <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p>