CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-25757

A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may result in arbitrary input being passed to system command APIs, resulting in arbitrary command execution with root privileges. This affects DSR-150, DSR-250, DSR-500, and DSR-1000AC with firmware 3.14 and 3.17.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 65.8%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 8.3

References

Products affected by CVE-2020-25757

Dlink » Dsr-1000 » Version: N/A

cpe:2.3:h:dlink:dsr-1000:-
Dlink » Dsr-1000ac » Version: N/A

cpe:2.3:h:dlink:dsr-1000ac:-
Dlink » Dsr-1000n » Version: N/A

cpe:2.3:h:dlink:dsr-1000n:-
Dlink » Dsr-150 » Version: N/A

cpe:2.3:h:dlink:dsr-150:-
Dlink » Dsr-150n » Version: N/A

cpe:2.3:h:dlink:dsr-150n:-
Dlink » Dsr-250 » Version: N/A

cpe:2.3:h:dlink:dsr-250:-
Dlink » Dsr-250n » Version: N/A

cpe:2.3:h:dlink:dsr-250n:-
Dlink » Dsr-500 » Version: N/A

cpe:2.3:h:dlink:dsr-500:-
Dlink » Dsr-500ac » Version: N/A

cpe:2.3:h:dlink:dsr-500ac:-
Dlink » Dsr-500n » Version: N/A

cpe:2.3:h:dlink:dsr-500n:-
Dlink » Dsr-1000 Firmware » Version: 1.01b50

cpe:2.3:o:dlink:dsr-1000_firmware:1.01b50
Dlink » Dsr-1000 Firmware » Version: 1.02b11

cpe:2.3:o:dlink:dsr-1000_firmware:1.02b11
Dlink » Dsr-1000 Firmware » Version: 1.02b25

cpe:2.3:o:dlink:dsr-1000_firmware:1.02b25
Dlink » Dsr-1000 Firmware » Version: 1.03b12

cpe:2.3:o:dlink:dsr-1000_firmware:1.03b12
Dlink » Dsr-1000 Firmware » Version: 1.03b23

cpe:2.3:o:dlink:dsr-1000_firmware:1.03b23
Dlink » Dsr-1000 Firmware » Version: 1.03b27

cpe:2.3:o:dlink:dsr-1000_firmware:1.03b27
Dlink » Dsr-1000 Firmware » Version: 1.03b36

cpe:2.3:o:dlink:dsr-1000_firmware:1.03b36
Dlink » Dsr-1000 Firmware » Version: 1.03b43

cpe:2.3:o:dlink:dsr-1000_firmware:1.03b43
Dlink » Dsr-1000 Firmware » Version: 1.04b58

cpe:2.3:o:dlink:dsr-1000_firmware:1.04b58
Dlink » Dsr-1000 Firmware » Version: 1.06b43

cpe:2.3:o:dlink:dsr-1000_firmware:1.06b43
Dlink » Dsr-1000 Firmware » Version: 1.06b53

cpe:2.3:o:dlink:dsr-1000_firmware:1.06b53
Dlink » Dsr-1000 Firmware » Version: 1.08b77

cpe:2.3:o:dlink:dsr-1000_firmware:1.08b77
Dlink » Dsr-1000 Firmware » Version: 3.17

cpe:2.3:o:dlink:dsr-1000_firmware:3.17
Dlink » Dsr-1000ac Firmware » Version: 3.17

cpe:2.3:o:dlink:dsr-1000ac_firmware:3.17
Dlink » Dsr-1000n Firmware » Version: 1.01b50

cpe:2.3:o:dlink:dsr-1000n_firmware:1.01b50
Dlink » Dsr-1000n Firmware » Version: 1.02b11

cpe:2.3:o:dlink:dsr-1000n_firmware:1.02b11
Dlink » Dsr-1000n Firmware » Version: 1.02b25

cpe:2.3:o:dlink:dsr-1000n_firmware:1.02b25
Dlink » Dsr-1000n Firmware » Version: 1.03b12

cpe:2.3:o:dlink:dsr-1000n_firmware:1.03b12
Dlink » Dsr-1000n Firmware » Version: 1.03b23

cpe:2.3:o:dlink:dsr-1000n_firmware:1.03b23
Dlink » Dsr-1000n Firmware » Version: 1.03b27

cpe:2.3:o:dlink:dsr-1000n_firmware:1.03b27
Dlink » Dsr-1000n Firmware » Version: 1.03b36

cpe:2.3:o:dlink:dsr-1000n_firmware:1.03b36
Dlink » Dsr-1000n Firmware » Version: 1.03b43

cpe:2.3:o:dlink:dsr-1000n_firmware:1.03b43
Dlink » Dsr-1000n Firmware » Version: 1.04b58

cpe:2.3:o:dlink:dsr-1000n_firmware:1.04b58
Dlink » Dsr-1000n Firmware » Version: 1.06b43

cpe:2.3:o:dlink:dsr-1000n_firmware:1.06b43
Dlink » Dsr-1000n Firmware » Version: 1.06b53

cpe:2.3:o:dlink:dsr-1000n_firmware:1.06b53
Dlink » Dsr-1000n Firmware » Version: 1.08b51

cpe:2.3:o:dlink:dsr-1000n_firmware:1.08b51
Dlink » Dsr-1000n Firmware » Version: 1.08b77

cpe:2.3:o:dlink:dsr-1000n_firmware:1.08b77
Dlink » Dsr-1000n Firmware » Version: 2.11b201

cpe:2.3:o:dlink:dsr-1000n_firmware:2.11b201
Dlink » Dsr-1000n Firmware » Version: 3.17

cpe:2.3:o:dlink:dsr-1000n_firmware:3.17
Dlink » Dsr-150 Firmware » Version: 1.0.9b32

cpe:2.3:o:dlink:dsr-150_firmware:1.0.9b32
Dlink » Dsr-150 Firmware » Version: 1.05b29

cpe:2.3:o:dlink:dsr-150_firmware:1.05b29
Dlink » Dsr-150 Firmware » Version: 1.05b35

cpe:2.3:o:dlink:dsr-150_firmware:1.05b35
Dlink » Dsr-150 Firmware » Version: 1.05b46

cpe:2.3:o:dlink:dsr-150_firmware:1.05b46
Dlink » Dsr-150 Firmware » Version: 1.05b50

cpe:2.3:o:dlink:dsr-150_firmware:1.05b50
Dlink » Dsr-150 Firmware » Version: 1.08

cpe:2.3:o:dlink:dsr-150_firmware:1.08
Dlink » Dsr-150 Firmware » Version: 1.08b29

cpe:2.3:o:dlink:dsr-150_firmware:1.08b29
Dlink » Dsr-150 Firmware » Version: 1.08b44

cpe:2.3:o:dlink:dsr-150_firmware:1.08b44
Dlink » Dsr-150 Firmware » Version: 3.11

cpe:2.3:o:dlink:dsr-150_firmware:3.11
Dlink » Dsr-150 Firmware » Version: 3.12

cpe:2.3:o:dlink:dsr-150_firmware:3.12
Dlink » Dsr-150 Firmware » Version: 3.14

cpe:2.3:o:dlink:dsr-150_firmware:3.14
Dlink » Dsr-150 Firmware » Version: 3.17

cpe:2.3:o:dlink:dsr-150_firmware:3.17
Dlink » Dsr-150n Firmware » Version: 01.07.2016

cpe:2.3:o:dlink:dsr-150n_firmware:01.07.2016
Dlink » Dsr-150n Firmware » Version: 1.05b48

cpe:2.3:o:dlink:dsr-150n_firmware:1.05b48
Dlink » Dsr-150n Firmware » Version: 1.05b64

cpe:2.3:o:dlink:dsr-150n_firmware:1.05b64
Dlink » Dsr-150n Firmware » Version: 3.17

cpe:2.3:o:dlink:dsr-150n_firmware:3.17
Dlink » Dsr-250 Firmware » Version: 1.01b46

cpe:2.3:o:dlink:dsr-250_firmware:1.01b46
Dlink » Dsr-250 Firmware » Version: 1.01b56

cpe:2.3:o:dlink:dsr-250_firmware:1.01b56
Dlink » Dsr-250 Firmware » Version: 1.05b20

cpe:2.3:o:dlink:dsr-250_firmware:1.05b20
Dlink » Dsr-250 Firmware » Version: 1.05b53

cpe:2.3:o:dlink:dsr-250_firmware:1.05b53
Dlink » Dsr-250 Firmware » Version: 1.08b31

cpe:2.3:o:dlink:dsr-250_firmware:1.08b31
Dlink » Dsr-250 Firmware » Version: 1.08b39

cpe:2.3:o:dlink:dsr-250_firmware:1.08b39
Dlink » Dsr-250 Firmware » Version: 1.08b44

cpe:2.3:o:dlink:dsr-250_firmware:1.08b44
Dlink » Dsr-250 Firmware » Version: 1.09b32

cpe:2.3:o:dlink:dsr-250_firmware:1.09b32
Dlink » Dsr-250 Firmware » Version: 2.11

cpe:2.3:o:dlink:dsr-250_firmware:2.11
Dlink » Dsr-250 Firmware » Version: 3.11b101h

cpe:2.3:o:dlink:dsr-250_firmware:3.11b101h
Dlink » Dsr-250 Firmware » Version: 3.12

cpe:2.3:o:dlink:dsr-250_firmware:3.12
Dlink » Dsr-250 Firmware » Version: 3.13_ww

cpe:2.3:o:dlink:dsr-250_firmware:3.13_ww
Dlink » Dsr-250 Firmware » Version: 3.14

cpe:2.3:o:dlink:dsr-250_firmware:3.14
Dlink » Dsr-250 Firmware » Version: 3.17

cpe:2.3:o:dlink:dsr-250_firmware:3.17
Dlink » Dsr-250n Firmware » Version: 1.01b46

cpe:2.3:o:dlink:dsr-250n_firmware:1.01b46
Dlink » Dsr-250n Firmware » Version: 1.01b56

cpe:2.3:o:dlink:dsr-250n_firmware:1.01b56
Dlink » Dsr-250n Firmware » Version: 1.05b20

cpe:2.3:o:dlink:dsr-250n_firmware:1.05b20
Dlink » Dsr-250n Firmware » Version: 1.05b53

cpe:2.3:o:dlink:dsr-250n_firmware:1.05b53
Dlink » Dsr-250n Firmware » Version: 1.05b73_ww

cpe:2.3:o:dlink:dsr-250n_firmware:1.05b73_ww
Dlink » Dsr-250n Firmware » Version: 1.08b31

cpe:2.3:o:dlink:dsr-250n_firmware:1.08b31
Dlink » Dsr-250n Firmware » Version: 1.08b39

cpe:2.3:o:dlink:dsr-250n_firmware:1.08b39
Dlink » Dsr-250n Firmware » Version: 1.08b44

cpe:2.3:o:dlink:dsr-250n_firmware:1.08b44
Dlink » Dsr-250n Firmware » Version: 3.11

cpe:2.3:o:dlink:dsr-250n_firmware:3.11
Dlink » Dsr-250n Firmware » Version: 3.12_ww

cpe:2.3:o:dlink:dsr-250n_firmware:3.12_ww
Dlink » Dsr-250n Firmware » Version: 3.13_ww

cpe:2.3:o:dlink:dsr-250n_firmware:3.13_ww
Dlink » Dsr-250n Firmware » Version: 3.14

cpe:2.3:o:dlink:dsr-250n_firmware:3.14
Dlink » Dsr-250n Firmware » Version: 3.17

cpe:2.3:o:dlink:dsr-250n_firmware:3.17
Dlink » Dsr-500 Firmware » Version: 1.02b11

cpe:2.3:o:dlink:dsr-500_firmware:1.02b11
Dlink » Dsr-500 Firmware » Version: 1.02b25

cpe:2.3:o:dlink:dsr-500_firmware:1.02b25
Dlink » Dsr-500 Firmware » Version: 1.03b12

cpe:2.3:o:dlink:dsr-500_firmware:1.03b12
Dlink » Dsr-500 Firmware » Version: 1.03b23

cpe:2.3:o:dlink:dsr-500_firmware:1.03b23
Dlink » Dsr-500 Firmware » Version: 1.03b27

cpe:2.3:o:dlink:dsr-500_firmware:1.03b27
Dlink » Dsr-500 Firmware » Version: 1.03b36

cpe:2.3:o:dlink:dsr-500_firmware:1.03b36
Dlink » Dsr-500 Firmware » Version: 1.03b43

cpe:2.3:o:dlink:dsr-500_firmware:1.03b43
Dlink » Dsr-500 Firmware » Version: 1.04b58

cpe:2.3:o:dlink:dsr-500_firmware:1.04b58
Dlink » Dsr-500 Firmware » Version: 1.06b43

cpe:2.3:o:dlink:dsr-500_firmware:1.06b43
Dlink » Dsr-500 Firmware » Version: 1.06b53

cpe:2.3:o:dlink:dsr-500_firmware:1.06b53
Dlink » Dsr-500 Firmware » Version: 1.08b51

cpe:2.3:o:dlink:dsr-500_firmware:1.08b51
Dlink » Dsr-500 Firmware » Version: 1.08b77

cpe:2.3:o:dlink:dsr-500_firmware:1.08b77
Dlink » Dsr-500 Firmware » Version: 2.12

cpe:2.3:o:dlink:dsr-500_firmware:2.12
Dlink » Dsr-500 Firmware » Version: 3.13

cpe:2.3:o:dlink:dsr-500_firmware:3.13
Dlink » Dsr-500 Firmware » Version: 3.17

cpe:2.3:o:dlink:dsr-500_firmware:3.17
Dlink » Dsr-500ac Firmware » Version: 3.17

cpe:2.3:o:dlink:dsr-500ac_firmware:3.17
Dlink » Dsr-500n Firmware » Version: 1.02

cpe:2.3:o:dlink:dsr-500n_firmware:1.02
Dlink » Dsr-500n Firmware » Version: 1.02b11

cpe:2.3:o:dlink:dsr-500n_firmware:1.02b11
Dlink » Dsr-500n Firmware » Version: 1.02b25

cpe:2.3:o:dlink:dsr-500n_firmware:1.02b25
Dlink » Dsr-500n Firmware » Version: 1.03b12

cpe:2.3:o:dlink:dsr-500n_firmware:1.03b12
Dlink » Dsr-500n Firmware » Version: 1.03b23

cpe:2.3:o:dlink:dsr-500n_firmware:1.03b23
Dlink » Dsr-500n Firmware » Version: 1.03b27

cpe:2.3:o:dlink:dsr-500n_firmware:1.03b27
Dlink » Dsr-500n Firmware » Version: 1.03b36

cpe:2.3:o:dlink:dsr-500n_firmware:1.03b36
Dlink » Dsr-500n Firmware » Version: 1.03b43

cpe:2.3:o:dlink:dsr-500n_firmware:1.03b43
Dlink » Dsr-500n Firmware » Version: 1.04b58

cpe:2.3:o:dlink:dsr-500n_firmware:1.04b58
Dlink » Dsr-500n Firmware » Version: 1.06b43

cpe:2.3:o:dlink:dsr-500n_firmware:1.06b43
Dlink » Dsr-500n Firmware » Version: 1.06b53

cpe:2.3:o:dlink:dsr-500n_firmware:1.06b53
Dlink » Dsr-500n Firmware » Version: 1.08b51

cpe:2.3:o:dlink:dsr-500n_firmware:1.08b51
Dlink » Dsr-500n Firmware » Version: 1.08b77

cpe:2.3:o:dlink:dsr-500n_firmware:1.08b77
Dlink » Dsr-500n Firmware » Version: 2.11b201c

cpe:2.3:o:dlink:dsr-500n_firmware:2.11b201c
Dlink » Dsr-500n Firmware » Version: 2.12

cpe:2.3:o:dlink:dsr-500n_firmware:2.12
Dlink » Dsr-500n Firmware » Version: 2.13

cpe:2.3:o:dlink:dsr-500n_firmware:2.13

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-25757

Products

Pricing

Contact Us