CVE-2020-24581

An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55

published December 22, 2020

CVSS

—

EPSS

14%

Percentile

96.5

In the wild

Unconfirmed

What it is

An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. It contains an execute_cmd.cgi feature (that is not reachable via the web user interface) that lets an authenticated user execute Operating System commands.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.13727 · 96.5th percentile
Published: 2020-12-22T18:05Z

EPSS history

Timeline

22 DEC 18:05Z
An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55
cvelistv5