Lucene search

Dcs-2670L Firmware Security Vulnerabilities - 2020

cve

CVE-2020-25078

An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticated /config/getuser endpoint allows for remote administrator password disclosure.

7.5CVSS

7.7AI Score

0.825EPSS

2020-09-02 04:15 PM

100

In Wild

cve

CVE-2020-25079

An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. cgi-bin/ddns_enc.cgi allows authenticated command injection.

8.8CVSS

8.9AI Score

0.001EPSS

2020-09-02 04:15 PM