CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-25078

An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticated /config/getuser endpoint allows for remote administrator password disclosure.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.94

EPSS Ranking 99.9%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2020-25078

Dlink » Dcs-2530l » Version: N/A

cpe:2.3:h:dlink:dcs-2530l:-
Dlink » Dcs-2670l » Version: N/A

cpe:2.3:h:dlink:dcs-2670l:-
Dlink » Dcs-2530l Firmware » Version: N/A

cpe:2.3:o:dlink:dcs-2530l_firmware:-
Dlink » Dcs-2530l Firmware » Version: 1.00.21

cpe:2.3:o:dlink:dcs-2530l_firmware:1.00.21
Dlink » Dcs-2530l Firmware » Version: 1.03.01

cpe:2.3:o:dlink:dcs-2530l_firmware:1.03.01
Dlink » Dcs-2530l Firmware » Version: 1.04.01

cpe:2.3:o:dlink:dcs-2530l_firmware:1.04.01
Dlink » Dcs-2530l Firmware » Version: 1.05.05

cpe:2.3:o:dlink:dcs-2530l_firmware:1.05.05
Dlink » Dcs-2670l Firmware » Version: N/A

cpe:2.3:o:dlink:dcs-2670l_firmware:-
Dlink » Dcs-2670l Firmware » Version: 1.10

cpe:2.3:o:dlink:dcs-2670l_firmware:1.10
Dlink » Dcs-2670l Firmware » Version: 2.01

cpe:2.3:o:dlink:dcs-2670l_firmware:2.01
Dlink » Dcs-2670l Firmware » Version: 2.02

cpe:2.3:o:dlink:dcs-2670l_firmware:2.02

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-25078

Products

Pricing

Contact Us