What’s Vulnerable › Vulnerabilities

CVE-2020-25079: D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2025-08-05
• EPSS: 54.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-09-02 · updated 2026-06-17
• Weakness: CWE-77

Description

An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. cgi-bin/ddns_enc.cgi allows authenticated command injection.

Affected products

• Dlink Dcs-2530L Firmware: through 1.05.05
• Dlink Dcs-2670L Firmware: before 2.03.00 — fixed in 2.03.00
• Dlink Dcs-4603 Firmware: before 1.04.02 — fixed in 1.04.02
• Dlink Dcs-4622 Firmware: before 2.01.10 — fixed in 2.01.10
• Dlink Dcs-4701E Firmware: before 2.03.01 — fixed in 2.03.01
• Dlink Dcs-4703E Firmware: before 1.03.04 — fixed in 1.03.04
• Dlink Dcs-4705E Firmware: before 1.03.02 — fixed in 1.03.02
• Dlink Dcs-4802E Firmware: before 2.01.01 — fixed in 2.01.01
• Dlink Dcs-P703 Firmware: all versions

How to fix

Upgrade to a fixed version: Dlink Dcs-2670L Firmware 2.03.00; Dlink Dcs-4603 Firmware 1.04.02; Dlink Dcs-4622 Firmware 2.01.10; Dlink Dcs-4701E Firmware 2.03.01; Dlink Dcs-4703E Firmware 1.03.04; Dlink Dcs-4705E Firmware 1.03.02; Dlink Dcs-4802E Firmware 2.01.01. Check the vendor advisory for mitigations.

References

• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10180
• https://twitter.com/Dogonsecurity/status/1271265152118259712
• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10180
• https://twitter.com/Dogonsecurity/status/1271265152118259712
• https://support.dlink.com/productinfo.aspx?m=DCS-2530L
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-25079

Get alerted when CVE-2020-25079 or the next vulnerability affects your stack