Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
dlink dsr-500ac firmware vulnerabilities and exploits
(subscribe to this query)
8.3
CVSSv2
CVE-2020-25757
A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may result in arbitrary input being passed to system command APIs, resulting in arbitrary command execution with root privileges. This affects DSR-150, DSR-250, DSR-500, and DSR-1000AC with firmw...
Dlink Dsr-150 Firmware
Dlink Dsr-150n Firmware
Dlink Dsr-250 Firmware
Dlink Dsr-250n Firmware
Dlink Dsr-500 Firmware
Dlink Dsr-500n Firmware
Dlink Dsr-500ac Firmware
Dlink Dsr-1000 Firmware
Dlink Dsr-1000n Firmware
Dlink Dsr-1000ac Firmware
9
CVSSv2
CVE-2020-25759
An issue exists on D-Link DSR-250 3.17 devices. Certain functionality in the Unified Services Router web interface could allow an authenticated malicious user to execute arbitrary commands, due to a lack of validation of inputs provided in multipart HTTP POST requests.
Dlink Dsr-150 Firmware
Dlink Dsr-150n Firmware
Dlink Dsr-250 Firmware
Dlink Dsr-250n Firmware
Dlink Dsr-500 Firmware
Dlink Dsr-500n Firmware
Dlink Dsr-500ac Firmware
Dlink Dsr-1000 Firmware
Dlink Dsr-1000n Firmware
Dlink Dsr-1000ac Firmware
9
CVSSv2
CVE-2020-25758
An issue exists on D-Link DSR-250 3.17 devices. Insufficient validation of configuration file checksums could allow a remote, authenticated malicious user to inject arbitrary crontab entries into saved configurations before uploading. These entries are executed as root.
Dlink Dsr-150 Firmware
Dlink Dsr-150n Firmware
Dlink Dsr-250 Firmware
Dlink Dsr-250n Firmware
Dlink Dsr-500 Firmware
Dlink Dsr-500n Firmware
Dlink Dsr-500ac Firmware
Dlink Dsr-1000 Firmware
Dlink Dsr-1000n Firmware
Dlink Dsr-1000ac Firmware
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-37316
firmware
CVE-2024-30078
CVE-2024-5995
remote code execution
logic flaw
CVE-2024-20693
CVE-2024-37315
CVE-2024-5464
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started