Approved changes feed: RSS · Atom

cpe:2.3:h:dlink:dsr-1000ac:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorDlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44)
ProductDsr 1000Ac (b601259a-d1c8-5182-ae09-77dbb487d17a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-25759 not_vulnerable 2026-06-08 05:23:49.371807 Details available
An issue was discovered on D-Link DSR-250 3.17 devices. Certain functionality in the Unified Services Router web interface could allow an authenticated attacker to execute arbitrary commands, due to a lack of validation of inputs provided in multipart HTTP POST requests.
Published: 2020-12-15T19:28:06.000Z
Updated: 2024-08-04T15:40:36.958Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25758 not_vulnerable 2026-06-08 05:23:49.369802 Details available
An issue was discovered on D-Link DSR-250 3.17 devices. Insufficient validation of configuration file checksums could allow a remote, authenticated attacker to inject arbitrary crontab entries into saved configurations before uploading. These entries are executed as root.
Published: 2020-12-15T19:27:55.000Z
Updated: 2024-08-04T15:40:36.946Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25757 not_vulnerable 2026-06-08 05:23:49.367968 Details available
A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may result in arbitrary input being passed to system command APIs, resulting in arbitrary command execution with root privileges. This affects DSR-150, DSR-250, DSR-500, and DSR-1000AC with firmware 3.14 and 3.17.
Published: 2020-12-15T19:27:32.000Z
Updated: 2024-08-04T15:40:36.937Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.