CVE-2020-25506: D-Link DNS-320 Device Command Injection Vulnerability.
D-Link DNS-320 Device Command Injection Vulnerability. D-Link DNS-320 device contains a command injection vulnerability in the sytem_mgr.cgi component that may allow for remote code execution.
- CISA KEV-listed (remediation due 2022-05-03)
- EPSS 100.0% (100.0% percentile)
- CVSS 9.8 critical