CVE-2020-25759

An issue was discovered on D-Link DSR-250 3.17 devices. Certain functionality in the Unified Services Router web interface could allow an authenticated attacker to execute arbitrary commands, due to a lack of validation of inputs provided in multipart HTTP POST requests.

Date published : 2020-12-15

https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10195

Digital Defense, Inc. Discloses Zero-Day Vulnerabilities in D-Link VPN Routers