ID de Prueba:	1.3.6.1.4.1.25623.1.0.117076
Categoría:	Denial of Service
Título:	D-Link DSR-250N DoS Vulnerability (CVE-2020-26567)
Resumen:	D-Link DSR-250N devices are prone to a Denial-of-Service (DoS) vulnerability.
Descripción:	Summary: D-Link DSR-250N devices are prone to a Denial-of-Service (DoS) vulnerability. Vulnerability Insight: CGI scripts exist on the router that can be directly accessed with a web browser, without any authentication. In particular, the script '/scgi-bin/upgradeStatusReboot.cgi' executes the command to reboot the device. Vulnerability Impact: By sending repeated requests an attacker is able to constantly restarting the device making it unusable for legit users. Affected Software/OS: D-Link DSR-250N devices with firmware version 3.12 and below are known to be affected. Other D-Link DSR models might be affected as well. Solution: Update to version 3.17B301C_WW or later. Please see the referenced vendor advisory for more information. CVSS Score: 4.9 CVSS Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2020-26567 http://packetstormsecurity.com/files/159516/D-Link-DSR-250N-Denial-Of-Service.html http://seclists.org/fulldisclosure/2020/Oct/14 https://www.redteam-pentesting.de/advisories/rt-sa-2020-002
Copyright	Copyright (C) 2020 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.