Vulnerability Details CVE-2020-25079
An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. cgi-bin/ddns_enc.cgi allows authenticated command injection.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.183
EPSS Ranking 94.9%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 9.0
References
Products affected by CVE-2020-25079
-
cpe:2.3:h:dlink:dcs-2530l:-
-
cpe:2.3:h:dlink:dcs-2670l:-
-
cpe:2.3:o:dlink:dcs-2530l_firmware:-
-
cpe:2.3:o:dlink:dcs-2530l_firmware:1.00.21
-
cpe:2.3:o:dlink:dcs-2530l_firmware:1.03.01
-
cpe:2.3:o:dlink:dcs-2530l_firmware:1.04.01
-
cpe:2.3:o:dlink:dcs-2530l_firmware:1.05.05
-
cpe:2.3:o:dlink:dcs-2670l_firmware:-
-
cpe:2.3:o:dlink:dcs-2670l_firmware:1.10
-
cpe:2.3:o:dlink:dcs-2670l_firmware:2.01
-
cpe:2.3:o:dlink:dcs-2670l_firmware:2.02