Test Kennung:	1.3.6.1.4.1.25623.1.0.117076
Kategorie:	Denial of Service
Titel:	D-Link DSR-250N DoS Vulnerability (CVE-2020-26567)
Zusammenfassung:	D-Link DSR-250N devices are prone to a Denial-of-Service (DoS) vulnerability.
Beschreibung:	Summary: D-Link DSR-250N devices are prone to a Denial-of-Service (DoS) vulnerability. Vulnerability Insight: CGI scripts exist on the router that can be directly accessed with a web browser, without any authentication. In particular, the script '/scgi-bin/upgradeStatusReboot.cgi' executes the command to reboot the device. Vulnerability Impact: By sending repeated requests an attacker is able to constantly restarting the device making it unusable for legit users. Affected Software/OS: D-Link DSR-250N devices with firmware version 3.12 and below are known to be affected. Other D-Link DSR models might be affected as well. Solution: Update to version 3.17B301C_WW or later. Please see the referenced vendor advisory for more information. CVSS Score: 4.9 CVSS Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2020-26567 http://packetstormsecurity.com/files/159516/D-Link-DSR-250N-Denial-Of-Service.html http://seclists.org/fulldisclosure/2020/Oct/14 https://www.redteam-pentesting.de/advisories/rt-sa-2020-002
Copyright	Copyright (C) 2020 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.