Detections
Analytics

CVE-2020-25078

high

Description

An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticated /config/getuser endpoint allows for remote administrator password disclosure.

References

https://www.databreachtoday.com/five-year-old-d-link-bugs-see-active-exploitation-a-29138

https://securityaffairs.com/180833/security/u-s-cisa-adds-d-link-cameras-and-network-video-recorder-flaws-to-its-known-exploited-vulnerabilities-catalog.html

https://www.cisa.gov/news-events/alerts/2025/08/05/cisa-adds-three-known-exploited-vulnerabilities-catalog

https://thehackernews.com/2025/08/cisa-adds-3-d-link-router-flaws-to-kev.html

https://www.infosecurity-magazine.com/news/webcams-vulnerable-hiatusrat-fbi/

https://thehackernews.com/2024/12/cisa-and-fbi-raise-alerts-on-exploited.html

https://www.bleepingcomputer.com/news/security/fbi-spots-hiatusrat-malware-attacks-targeting-web-cameras-dvrs/

https://github.com/flags-alt/abyss-c2

https://github.com/mrhenrike/EmbedXPL-Forge

https://github.com/W01fh4cker/Serein

https://github.com/chinaYozz/CVE-2020-25078

https://github.com/Yang0615777/PocList

https://github.com/1n7erface/PocList

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-25078

https://twitter.com/Dogonsecurity/status/1273251236167516161

https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10180

https://support.dlink.com/productinfo.aspx?m=DCS-2530L

Details

Source: Mitre, NVD

Published: 2020-09-02

Updated: 2026-06-17

Known Exploited Vulnerability (KEV)

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 7.5

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Severity: High

EPSS

EPSS: 0.97901