CVE-2020-25078

CVE-2020-25078 affects D-Link DCS-2530L (up to 1.06.01 Hotfix) and DCS-2670L (up to 2.02). The unauthenticated /config/getuser endpoint allows remote administrator password disclosure. Impact: attacker could obtain the admin password, enabling unauthorized access. Remediation: update firmware to ...

CVE-2020-25079

CVE-2020-25079 affects D-Link DCS-2530L (pre-1.06.01 Hotfix) and DCS-2670L (through 2.02). A command-injection vulnerability exists in cgi-bin/ddns_enc.cgi that can be triggered by authenticated users. Public records confirm exploitable conditions and include in-the-wild indicators (CISA KEV cata...