Security Advisory

CVE-2020-25759

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-12-15 19:28:06
Last updated 2024-08-04 15:40:36
Assigner mitre
State PUBLISHED

Description

An issue was discovered on D-Link DSR-250 3.17 devices. Certain functionality in the Unified Services Router web interface could allow an authenticated attacker to execute arbitrary commands, due to a lack of validation of inputs provided in multipart HTTP POST requests.