CVE-2020-26567

published 2020-10-08

CVE-2020-26567: An issue was discovered on D-Link DSR-250N before 3.17B devices. The CGI script upgradeStatusReboot.cgi can be accessed without authentication. Any access…

medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

EXPLOIT

An issue was discovered on D-Link DSR-250N before 3.17B devices. The CGI script upgradeStatusReboot.cgi can be accessed without authentication. Any access reboots the device, rendering it therefore unusable for several minutes.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
dlink	dsr-250n_firmware	< 3.17b	3.17b

CWE-306