CVE-2020-25758: Critical severity d-link dsr-150 vulnerability
An issue was discovered on D-Link DSR-250 3.17 devices. Insufficient validation of configuration file checksums could allow a remote, authenticated attacker to inject arbitrary crontab entries into saved configurations before uploading. These entries are executed as root.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-25758?
CVE-2020-25758 is a vulnerability found on D-Link DSR-250 3.17 devices that allows a remote, authenticated attacker to inject arbitrary crontab entries into saved configurations.
How severe is CVE-2020-25758?
CVE-2020-25758 has a severity score of 8.8, which is considered critical.
How can an attacker exploit CVE-2020-25758?
An attacker can exploit CVE-2020-25758 by injecting arbitrary crontab entries into saved configurations before uploading.
Which devices are affected by CVE-2020-25758?
D-Link DSR-250 3.17 devices are affected by CVE-2020-25758.
Are there any fixes for CVE-2020-25758?
As of now, there are no official fixes or patches available for CVE-2020-25758. It is recommended to follow the official D-Link security bulletin for updates.