CVE-2020-25078 in dlink dcs-4603 firmware
LogPulse has a published detection rule for this CVE: it raises a notable when someone tries to exploit it.
What the vulnerability is
An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticated /config/getuser endpoint allows for remote administrator password disclosure.
Affected software: dlink dcs-4603 firmware, dlink dcs-4622 firmware, dlink dcs-4701e firmware, dlink dcs-4703e firmware, dlink dcs-4705e firmware, dlink dcs-4802e firmware, dlink dcs-p703 firmware, dlink dcs-2530l firmware, dlink dcs-2670l firmware
Scores
- CVSS: 7.5 (high)
- EPSS: 97.51% chance of exploitation in the next 30 days
- CISA KEV: Known exploited, listed 2025-08-05
- Published: 2020-09-02
What LogPulse has for it
- Detection rule: Yes, published
- Agent check (vulnerable version): No
- Mitigation: No
Source data: NIST NVD, CISA KEV and FIRST EPSS. LogPulse processes new CVEs every hour.
We build every detection with great care, but no two environments are the same. Log sources, parsing and configuration differ, so test a detection in your own environment before you rely on it.