CVE-2020-25759

2020-12-1519:28:06

mitre

www.cve.org

8.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.8%

JSON

An issue was discovered on D-Link DSR-250 3.17 devices. Certain functionality in the Unified Services Router web interface could allow an authenticated attacker to execute arbitrary commands, due to a lack of validation of inputs provided in multipart HTTP POST requests.