CVE-2020-9376

CVE-2020-9376 is an information disclosure vulnerability affecting D-Link DIR-610 devices, which are no longer supported by the vendor. This flaw allows an unauthenticated attacker to retrieve sensitive configuration information by manipulating a specific parameter in a GET request to getcfg.php. With a CVSS score of 7.5 (High), the vulnerability is easily exploitable over the network with low attack complexity, potentially leading to a complete compromise of confidentiality. While there is no evidence of active exploitation or public Metasploit modules, a Nuclei template exists for detection, and its high EPSS score suggests a significant likelihood of future exploitation.