CVE-2020-6765: D-Link DSL-GS225 Firmware

High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days.

D-Link DSL-GS225 J1 AU_1.0.4 devices allow an admin to execute OS commands by placing shell metacharacters after a supported CLI command, as demonstrated by ping -c1 127.0.0.1; cat/etc/passwd. The CLI is reachable by TELNET.

Affected products

• D-Link DSL-GS225 Firmware: up to and including au_1.0.4

Published 2020-04-10. Last modified 2026-06-17.