Test ID:	1.3.6.1.4.1.25623.1.0.145297
Category:	General
Title:	D-Link DNS Devices RCE Vulnerability (SAP10183) - Active Check
Summary:	D-Link DNS-320 devices are prone to a remote code execution; (RCE) vulnerability.
Description:	Summary: D-Link DNS-320 devices are prone to a remote code execution (RCE) vulnerability. Vulnerability Impact: D-Link DNS-320 is affected by command injection in the system_mgr.cgi component, which can lead to remote arbitrary code execution. Affected Software/OS: D-Link DNS-320 and probably other DNS devices in all versions. Solution: No solution was made available by the vendor. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. The vendor states that the affected devices are EoL and recommends to immediately retire and replace such devices. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-25506 https://gist.github.com/WinMin/6f63fd1ae95977e0e2d49bd4b5f00675 https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10183 https://www.dlink.com/en/security-bulletin/
Copyright	Copyright (C) 2021 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.