Dcs-2670l Firmware vulnerabilities

2 known vulnerabilities in Dcs-2670l Firmware from D-Link. 2 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  D-Link DCS-2530L and DCS-2670L Command Injection Exploited

  CVE-2020-25079Sep 2, 2020D-LinkEPSS 54%

  An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. cgi-bin/ddns_enc.cgi allows authenticated command injection.

• 7.5 High severity

  D-Link DCS-2530L and DCS-2670L Devices Unspecified Exploited

  CVE-2020-25078Sep 2, 2020D-LinkEPSS 97.5%

  An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticated /config/getuser endpoint allows for remote administrator password disclosure.