CVE-2020-25506
DL
D-Link DNS-320 Device
D-Link DNS-320 Device Command Injection Vulnerability
What it is
D-Link DNS-320 device contains a command injection vulnerability in the sytem_mgr.cgi component that may allow for remote code execution.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other D-Link entries on the list
- DIR-823X D-Link DIR-823X Command Injection Vulnerability CVE-2025-29635 · Apr 24, 2026
- Routers D-Link Routers Buffer Overflow Vulnerability CVE-2022-37055 · Dec 8, 2025
- DNR-322L D-Link DNR-322L Download of Code Without Integrity Check Vulnerability CVE-2022-40799 · Aug 5, 2025
- DCS-2530L and DCS-2670L Devices D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability CVE-2020-25079 · Aug 5, 2025
- DCS-2530L and DCS-2670L Devices D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability CVE-2020-25078 · Aug 5, 2025
- DIR-859 Router D-Link DIR-859 Router Path Traversal Vulnerability CVE-2024-0769 · Jun 25, 2025