3 matches found
CVE-2020-25758
An issue was discovered on D-Link DSR-250 3.17 devices. Insufficient validation of configuration file checksums could allow a remote, authenticated attacker to inject arbitrary crontab entries into saved configurations before uploading. These entries are executed as root...
CVE-2020-25758
An issue was discovered on D-Link DSR-250 3.17 devices. Insufficient validation of configuration file checksums could allow a remote, authenticated attacker to inject arbitrary crontab entries into saved configurations before uploading. These entries are executed as root...
PT-2020-5339
Name of the Vulnerable Software and Affected Versions D-Link DSR-250 version 3.17 SolarWinds Database Performance Analyzer DPA affected versions not specified Description An issue with insufficient validation of configuration file checksums could allow a remote, authenticated attacker to inject...