CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2020-25079

🔥 Known Exploited (CISA KEV)HIGH
8.8
CVSS Severity Score
EPSS Score90.8780%
EPSS Percentile91.94th
Published2020-09-02
Last Modified2025-11-07
Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. cgi-bin/ddns_enc.cgi allows authenticated command injection.

Affected Platforms (CPE)

💻
Dlink

Dcs 4703e Firmware

< 1.03.04
💻
Dlink

Dcs 4705e Firmware

< 1.03.02
💻
Dlink

Dcs 4802e Firmware

< 2.01.01
💻
Dlink

Dcs P703 Firmware

All versions

References & Advisories

🔗 https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10180
🔗 https://twitter.com/Dogonsecurity/status/1271265152118259712
🔗 https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10180
🔗 https://twitter.com/Dogonsecurity/status/1271265152118259712
🔗 https://support.dlink.com/productinfo.aspx?m=DCS-2530L
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-25079

相關漏洞威脅

CVE-2026-167718.8

In firmware versions 2.7.7 and earlier, the Arris BGW210‑700 gateway fails to enforce any server‑side authentication on its /cgi-b...

CVE-2026-120015.2

A hardcoded credential vulnerability exists in the firmware of multiple TP-Link routers (TL-WR845N v4, TL-WR850N v3, Archer C20 v6...

CVE-2026-658937.0

This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware. An attacker with ...

CVE-2026-645208.4

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies The ...