Lucene search
PRIOn knowledge basePRION:CVE-2020-25757HistoryDec 15, 2020 - 8:15 p.m.
Input validation
2020-12-1520:15:00
PRIOn knowledge base
www.prio-n.com
3
A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may result in arbitrary input being passed to system command APIs, resulting in arbitrary command execution with root privileges. This affects DSR-150, DSR-250, DSR-500, and DSR-1000AC with firmware 3.14 and 3.17.
Related
cve
cve
CVE-2020-25757
2020-12-15 20:15:16
cvelist
cvelist
CVE-2020-25757
2020-12-15 19:27:32
nvd
nvd
CVE-2020-25757
2020-12-15 20:15:16
threatpost
threatpost
D-Link Routers at Risk for Remote Takeover from Zero-Day Flaw
2020-12-09 14:56:14