CVE-2020-25759

🗓️ 15 Dec 2020 19:28:06Reported by mitreType

An issue in D-Link DSR-250 3.17 devices allows authenticated attacker to execute arbitrary commands

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2020-25759	15 Dec 202022:40	–	circl
CNNVD	D-link DSR-250 输入验证错误漏洞	15 Dec 202000:00	–	cnnvd
CNVD	D-Link DSR-250 Command Injection Vulnerability	16 Dec 202000:00	–	cnvd
Cvelist	CVE-2020-25759	15 Dec 202019:28	–	cvelist
EUVD	EUVD-2020-18410	7 Oct 202500:30	–	euvd
NVD	CVE-2020-25759	15 Dec 202020:15	–	nvd
OSV	CVE-2020-25759	15 Dec 202020:15	–	osv
Prion	Design/Logic Flaw	15 Dec 202020:15	–	prion
RedhatCVE	CVE-2020-25759	22 May 202516:18	–	redhatcve
ThreatPost	D-Link Routers at Risk for Remote Takeover from Zero-Day Flaw	9 Dec 202014:56	–	threatpost

NVD

Node

dlink dsr-150_firmwareRange≤3.17

AND

dlink dsr-150Match-

Node

dlink dsr-150n_firmwareRange≤3.17

AND

dlink dsr-150nMatch-

Node

dlink dsr-250_firmwareRange≤3.17

AND

dlink dsr-250Match-

Node

dlink dsr-250n_firmwareRange≤3.17

AND

dlink dsr-250nMatch-

Node

dlink dsr-500_firmwareRange≤3.17

AND

dlink dsr-500Match-

Node

dlink dsr-500n_firmware

AND

dlink dsr-500nMatch-

Node

dlink dsr-500ac_firmwareRange≤3.17

AND

dlink dsr-500acMatch-

Node

dlink dsr-1000_firmwareRange≤3.17

AND

dlink dsr-1000Match-

Node

dlink dsr-1000n_firmwareRange≤3.17

AND

dlink dsr-1000nMatch-

Node

dlink dsr-1000ac_firmwareRange≤3.17

AND

dlink dsr-1000acMatch-

Source	Link
supportannouncement	www.supportannouncement.us.dlink.com/announcement/publication.aspx
dlink	www.dlink.com/en/security-bulletin
digitaldefense	www.digitaldefense.com/news/zero-day-vuln-d-link-vpn-routers/

21 Nov 2024 05:18Current

8.7High risk

Vulners AI Score8.7

CVSS 3.18.8

CVSS 29

EPSS0.01453