What’s Vulnerable › Vulnerabilities

CVE-2020-18568

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 15.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-02-02 · updated 2026-06-17
• Weakness: CWE-78

Description

The D-Link DSR-250 (3.14) DSR-1000N (2.11B201) UPnP service contains a command injection vulnerability, which can cause remote command execution.

Affected products

• Dlink Dsr-1000N Firmware: 2.11b201
• Dlink Dsr-250 Firmware: 3.14

References

• https://gist.github.com/WinMin/5b2bc43b517503472bb28a298981ed5a
• https://www.dlink.com/en/security-bulletin/
• https://gist.github.com/WinMin/5b2bc43b517503472bb28a298981ed5a
• https://www.dlink.com/en/security-bulletin/

Get alerted when CVE-2020-18568 or the next vulnerability affects your stack