CVE

CVE-2020-25506

D-Link DNS-320 Device Command Injection Vulnerability

D-Link · DNS-320 Device

Date added (CISA)

2021-11-03

Remediation due

2022-05-03

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

D-Link DNS-320 device contains a command injection vulnerability in the sytem_mgr.cgi component that may allow for remote code execution.