CyberSec.Space Logo
Back to CVE Browser

CVE-2020-25078

Known Exploited (CISA KEV)HIGH
7.5
CVSS Severity Score
EPSS Score29.8750%
EPSS Percentile96.40th
PublishedSep 2, 2020
Last ModifiedNov 7, 2025

Vulnerability Description

An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticated /config/getuser endpoint allows for remote administrator password disclosure.

Affected Platforms (CPE)

💻
Dlink

Dcs 4603 Firmware

< 1.04.02
💻
Dlink

Dcs 4622 Firmware

< 2.01.10
💻
Dlink

Dcs 4701e Firmware

< 2.03.01
💻
Dlink

Dcs 4703e Firmware

< 1.03.04
💻
Dlink

Dcs 4705e Firmware

< 1.03.02
💻
Dlink

Dcs 4802e Firmware

< 2.01.01
💻
Dlink

Dcs P703 Firmware

All versions
💻
Dlink

Dcs 2530l Firmware

<= 1.05.05
💻
Dlink

Dcs 2670l Firmware

< 2.03.00

References & Advisories

🔗 https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10180
🔗 https://twitter.com/Dogonsecurity/status/1273251236167516161
🔗 https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10180
🔗 https://twitter.com/Dogonsecurity/status/1273251236167516161
🔗 https://support.dlink.com/productinfo.aspx?m=DCS-2530L
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-25078

Related Vulnerabilities

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...

CVE-2026-121905.3

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the compo...

CVE-2026-121895.3

A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzm...

CVE-2026-121886.3

A vulnerability was detected in Grit42 Grit up to 0.11.0. Affected by this issue is some unknown functionality of the file modules...