CVE-2020-10213

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the wps_sta_enrollee_pin parameter in a set_sta_enrollee_pin.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected.

• CWE-78

• https://github.com/kuc001/IoTFirmware/blob/master/D-Link/vulnerability3.mdExploit, Third Party Advisory
• https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/Trendnet-TEW-632.pdfThird Party Advisory
• https://github.com/kuc001/IoTFirmware/blob/master/D-Link/vulnerability3.mdExploit, Third Party Advisory
• https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/Trendnet-TEW-632.pdfThird Party Advisory

Published

Mar 7, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-10208Command Injection in EntoneWebEngine in Amino Communications…9.9
• CVE-2020-10209Command Injection in the CPE WAN Management Protocol (CWMP) …8.1
• CVE-2020-1021An elevation of privilege vulnerability exists in Windows Er…7.8
• CVE-2020-10210Because of hard-coded SSH keys for the root user in Amino Co…9.8
• CVE-2020-10211A remote code execution vulnerability in UCB component of Mi…9.8
• CVE-2020-10212upload.php in Responsive FileManager 9.13.4 and 9.14.0 allow…9.8
• CVE-2020-10214An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices…8.8
• CVE-2020-10215An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices…8.8
• CVE-2020-10216An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices…8.8
• CVE-2020-10218A Blind SQL Injection issue was discovered in Sapplica Sentr…6.5
• CVE-2020-1022A remote code execution vulnerability exists in Microsoft Dy…8
• CVE-2020-10220An issue was discovered in rConfig through 3.9.4. The web in…9.8