{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-26T11:35:50.206","vulnerabilities":[{"cve":{"id":"CVE-2020-25078","sourceIdentifier":"cve@mitre.org","published":"2020-09-02T16:15:12.627","lastModified":"2026-06-17T03:06:20.660","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticated /config/getuser endpoint allows for remote administrator password disclosure."},{"lang":"es","value":"Se detectó un problema en los dispositivos D-Link DCS-2530L versiones anteriores a 1.06.01 Hotfix  y DCS-2670L versiones hasta 2.02. El endpoint /config/getuser no autenticado permite una divulgación remota de contraseña de administrador"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-08-05T03:56:19.666926Z","id":"CVE-2020-25078","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2025-08-05","cisaActionDue":"2025-08-26","cisaRequiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dcs-4603_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.04.02","matchCriteriaId":"41124E24-06BE-417B-A9AF-BD641A75C144"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dlink:dcs-4603:-:*:*:*:*:*:*:*","matchCriteriaId":"8A2C3661-5F58-4472-B5A0-9A8024788BCD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dcs-4622_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.01.10","matchCriteriaId":"3BA3A472-3DA8-4AC3-84CF-1A2E58360B5A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dlink:dcs-4622:-:*:*:*:*:*:*:*","matchCriteriaId":"8CE51257-204E-4652-83C8-BE139D176BD4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dcs-4701e_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.03.01","matchCriteriaId":"9C8B4A06-BB05-4C28-89F0-E0EF7904A903"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dlink:dcs-4701e:-:*:*:*:*:*:*:*","matchCriteriaId":"A3DD99D0-B76B-4E80-AF95-4C36693ED7F3"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dcs-4703e_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.03.04","matchCriteriaId":"2A50FF8A-796D-4DC2-97A0-FA05FF8F292F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dlink:dcs-4703e:-:*:*:*:*:*:*:*","matchCriteriaId":"76074EE9-9D8F-4DC2-8E1F-69B791CC0FE3"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dcs-4705e_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.03.02","matchCriteriaId":"9D1B414B-FA5D-4567-9D75-936F420D91AC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dlink:dcs-4705e:-:*:*:*:*:*:*:*","matchCriteriaId":"056553CE-A448-46AC-A84D-937F026A7659"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dcs-4802e_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.01.01","matchCriteriaId":"270E0460-481C-41A0-9954-850943BA77CE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dlink:dcs-4802e:-:*:*:*:*:*:*:*","matchCriteriaId":"045E6932-6DC2-491D-A45C-B98B14C362BC"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dcs-p703_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"1ADE8472-8AFA-431A-9E14-5FCB878025F3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dlink:dcs-p703:-:*:*:*:*:*:*:*","matchCriteriaId":"3FA4D04F-09EC-4F29-85EF-2B183B113816"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dcs-2530l_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.05.05","matchCriteriaId":"93C1E07C-D4C7-4CB2-B0F7-01F838A3555B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dlink:dcs-2530l:-:*:*:*:*:*:*:*","matchCriteriaId":"40A05FF4-4847-41C2-946A-F8043481E11F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dcs-2670l_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.03.00","matchCriteriaId":"8E5964E9-1104-4430-A023-B7616B5A6217"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dlink:dcs-2670l:-:*:*:*:*:*:*:*","matchCriteriaId":"F66D7CA9-66E1-4A37-88AA-2E98DC0416C0"}]}]}],"references":[{"url":"https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10180","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://twitter.com/Dogonsecurity/status/1273251236167516161","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://twitter.com/Dogonsecurity/status/1273251236167516161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://support.dlink.com/productinfo.aspx?m=DCS-2530L","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Product"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-25078","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}}]}