CVE Feed

    Dashboard / CVE / CVE-2020-25506

    CVE-2020-25506

    D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead to remote arbitrary code execution.

    Published:Feb 2, 2021
    Last Modified:Nov 7, 2025
    EPS:Feb 2, 2021
    EPSS Score:0.93741
    CVSS Score:9.8

    CISA Notification

    Description

    D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead to remote arbitrary code execution.

    Required Action:

    Apply updates per vendor instructions.

    Notes:

    No extra notes provided.

    Due Date
    May 3, 2022
    1592 days ago
    Alert Date
    Nov 3, 2021
    1773 days ago

    Affected Products

    Vendor
    Dlink
    Product
    Dns-320
    Vendor
    Dlink
    Product
    Dns-320 Firmware

    Exploits

    https://gist.github.com/WinMin/6f63fd1ae95977e0e2d49bd4b5f00675https://gist.github.com/WinMin/6f63fd1ae95977e0e2d49bd4b5f00675

    Related CVEs

    CVE-2026-8273 (CVSS 5.1) — A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_set_host/cgi_set_ntp/c…
    CVE-2026-8272 (CVSS 2) — A security flaw has been discovered in D-Link DNS-320 2.06B01. This affects the function delete/rename/copy/mo…
    CVE-2026-8271 (CVSS 2) — A vulnerability was identified in D-Link DNS-320 2.06B01. The impacted element is the function cgi_speed/cgi_d…
    CVE-2026-5312 (CVSS 5.5) — A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, D…
    CVE-2026-5311 (CVSS 5.5) — A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-3…
    CVE-2026-5215 (CVSS 2.1) — A vulnerability was identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, D…
    CVE-2026-5214 (CVSS 7.4) — A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-32…
    CVE-2026-5213 (CVSS 7.4) — A vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, D…
    CVE-2026-5212 (CVSS 7.4) — A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, D…
    CVE-2026-5211 (CVSS 7.4) — A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High