CVE-2020-25506

D-Link DNS-320 Device Command Injection Vulnerability

Dns-320 Firmware

D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead to remote arbitrary code execution.

2. Feb 2021

Ausgewertete Quellen

• Hersteller
  https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10183
• Hersteller
  https://www.dlink.com/en/security-bulletin/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-25506
• CISA
  D-Link DNS-320 Device Command Injection Vulnerability
• NVD
  CVE-2020-25506
• GitHub
  https://gist.github.com/WinMin/6f63fd1ae95977e0e2d49bd4b5f00675