Exploited Vulnerabilities DailyCVE-2020-25079: D-Link DCS-2530L and DCS-2670L Devices
EPSS54.0%No. 840 of 1739 in KEV
CVE year2020~5 yrs before listing
Same vendor in KEV26
Same product2
| Field | Value |
|---|---|
| Vendor | D-Link |
| Product | DCS-2530L and DCS-2670L Devices |
| Name | D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability |
| Added to KEV | 2025-08-05 |
| US federal due date | 2025-08-26 |
| Ransomware use | Unknown |
| CWE | CWE-77 |
CISA description
D-Link DCS-2530L and DCS-2670L devices contains a command injection vulnerability in the cgi-bin/ddns_enc.cgi. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
Other entries for this product
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2020-25078 | D-Link DCS-2530L and DCS-2670L Devices | 2025-08-05 | 97.5% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A D-Link DCS-2530L and DCS-2670L Devices vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2025-08-05.