Vulnerability Details : CVE-2020-25757
A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may result in arbitrary input being passed to system command APIs, resulting in arbitrary command execution with root privileges. This affects DSR-150, DSR-250, DSR-500, and DSR-1000AC with firmware 3.14 and 3.17.
Vulnerability category: Input validation
Products affected by CVE-2020-25757
- cpe:2.3:o:dlink:dsr-250n_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:dlink:dsr-150_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:dlink:dsr-150n_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:dlink:dsr-250_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:dlink:dsr-500_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:dlink:dsr-500n_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:dlink:dsr-1000_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:dlink:dsr-1000n_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:dlink:dsr-500ac_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:dlink:dsr-1000ac_firmware:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2020-25757
0.14%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 50 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2020-25757
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
8.3
|
HIGH | AV:A/AC:L/Au:N/C:C/I:C/A:C |
6.5
|
10.0
|
NIST | |
8.8
|
HIGH | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
2.8
|
5.9
|
NIST |
CWE ids for CVE-2020-25757
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: nvd@nist.gov (Primary)
-
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.Assigned by: nvd@nist.gov (Primary)
References for CVE-2020-25757
-
https://www.digitaldefense.com/news/zero-day-vuln-d-link-vpn-routers/
Digital Defense, Inc. Discloses Zero-Day Vulnerabilities in D-Link VPN Routers | Digital Defense, Inc.Third Party Advisory
-
https://www.dlink.com/en/security-bulletin
Security Bulletin | D-LinkVendor Advisory
-
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10195
D-Link Technical SupportVendor Advisory
Jump to