DNS-320 Device · Sandworm Watch

Nov 3, 2021high

CVE-2020-25506: D-Link DNS-320 Device Command Injection Vulnerability

D-Link DNS-320 device contains a command injection vulnerability in the sytem_mgr.cgi component that may allow for remote code execution. Required action: Apply updates per vendor instructions.

CVE-2020-25506EPSS 100.0%D-LinkDNS-320 Device

CISA KEV ↗ · unattributed attribution