CVE-2020-25079: Improper Neutralization of Special Elements used in a Command

An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. cgi-bin/ddnsenc.cgi allows authenticated command injection...

CVE-2020-25078: Undefined Security Weakness

An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticated /config/getuser endpoint allows for remote administrator password disclosure...

PT-2020-15933

Name of the Vulnerable Software and Affected Versions D-Link DCS-2530L versions prior to 1.06.01 Hotfix D-Link DCS-2670L versions through 2.02 Description An issue exists in the cgi-bin/ddns enc.cgi file on D-Link DCS-2530L and DCS-2670L devices that allows authenticated command injection...

PT-2020-15932

Name of the Vulnerable Software and Affected Versions D-Link DCS-2530L versions prior to 1.06.01 Hotfix D-Link DCS-2670L versions through 2.02 Description An issue exists on D-Link DCS-2530L and DCS-2670L devices. The unauthenticated /config/getuser endpoint allows for remote administrator passwo...