PT-2020-15932 · D Link · D-Link Dcs-2530L+1

Fenix · Published 2020-06-11 · Updated 2025-11-07 · CVE-2020-25078

Positive Technologies · (AI Summary)

CVSS v2.0

7.8

High

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions D-Link DCS-2530L versions prior to 1.06.01 Hotfix D-Link DCS-2670L versions through 2.02

Description An issue exists on D-Link DCS-2530L and DCS-2670L devices. The unauthenticated /config/getuser endpoint allows for remote administrator password disclosure. This vulnerability is actively exploited in the wild, as confirmed by CISA’s Known Exploited Vulnerabilities (KEV) catalog. The HiatusRAT actors are targeting web cameras and DVRs, including those affected by this vulnerability.

Recommendations Update D-Link DCS-2530L to version 1.06.01 Hotfix or later. Update D-Link DCS-2670L to a version after 2.02.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2025-12529

CVE-2020-25078

Affected Products

D-Link Dcs-2530L

D-Link Dcs-2670L

References · 25

• 🔥 https://github.com/MzzdToT/CVE-2020-25078 · Exploit
• 🔥❌ https://github.com/S0por/CVE-2020-25078 · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2020-25078 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25078 · Security Note
• https://support.dlink.com/productinfo.aspx?m=DCS-2530L · Security Note
• https://bdu.fstec.ru/vul/2025-12529 · Security Note
• https://t.me/cveNotify/131151 · Telegram Post
• https://t.me/cybersecuritytechnologies/3056 · Telegram Post
• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10180 · Security Note, Vendor Advisory
• https://twitter.com/johndjohnson/status/1870101204967063570 · Twitter Post
• https://t.me/cveNotify/130968 · Telegram Post
• https://t.me/aptreports/14917 · Telegram Post
• https://reddit.com/r/SecOpsDaily/comments/1mlr02b/cisa_adds_3_dlink_vulnerabilities_to_kev_catalog · Reddit Post
• https://twitter.com/the_yellow_fall/status/1952910723568549978 · Twitter Post
• https://twitter.com/CounterTheFraud/status/1880475023229550850 · Twitter Post