CVE-2020-24579

D-Link DSL-2888A devices with firmware before AU_2.31_V1.1.47ae55 are vulnerable to an authentication bypass, enabling an unauthenticated attacker to access authenticated pages and functionality. Nuclei templates describe remote command execution as a potential outcome. Remediation: update to AU_...

CVE-2020-24580

The CVE concerns D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55, where lack of authentication allows an attacker to assign a static IP address previously used by a valid user. The issue arises from an authentication deficiency enabling IP address reassignment, potentially ena...

CVE-2020-24578

CVE-2020-24578 concerns the D‑Link DSL-2888A router with firmware prior to AU_2.31_V1.1.47ae55. A misconfigured FTP service permits a malicious network user to access system folders and download sensitive files (e.g., password hash files). Affected product: D‑Link DSL-2888A; root cause: misconfig...

CVE-2020-24581

CVE-2020-24581 affects D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. The issue stems from an execute_cmd.cgi feature (not reachable via the web UI) that allows an authenticated user to execute Operating System commands, enabling potential arbitrary command execution on the ...