Test ID:	1.3.6.1.4.1.25623.1.0.117076
Category:	Denial of Service
Title:	D-Link DSR-250N DoS Vulnerability (CVE-2020-26567)
Summary:	D-Link DSR-250N devices are prone to a Denial-of-Service (DoS) vulnerability.
Description:	Summary: D-Link DSR-250N devices are prone to a Denial-of-Service (DoS) vulnerability. Vulnerability Insight: CGI scripts exist on the router that can be directly accessed with a web browser, without any authentication. In particular, the script '/scgi-bin/upgradeStatusReboot.cgi' executes the command to reboot the device. Vulnerability Impact: By sending repeated requests an attacker is able to constantly restarting the device making it unusable for legit users. Affected Software/OS: D-Link DSR-250N devices with firmware version 3.12 and below are known to be affected. Other D-Link DSR models might be affected as well. Solution: Update to version 3.17B301C_WW or later. Please see the referenced vendor advisory for more information. CVSS Score: 4.9 CVSS Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-26567 http://packetstormsecurity.com/files/159516/D-Link-DSR-250N-Denial-Of-Service.html http://seclists.org/fulldisclosure/2020/Oct/14 https://www.redteam-pentesting.de/advisories/rt-sa-2020-002
Copyright	Copyright (C) 2020 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.