D-Link DCS-2670L Firmware vulnerabilities

2 CVEs affecting D-Link DCS-2670L Firmware, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-25079, published 2020-09-02.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-25078: D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability, published 2020-09-02. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2025-08-05. EPSS: 97.5% chance of exploitation in the next 30 days. An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticated /config/getuser endpoint allows for remote administrator password disclosure.
• CVE-2020-25079: D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability, published 2020-09-02. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2025-08-05. EPSS: 54% chance of exploitation in the next 30 days. An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. cgi-bin/ddns_enc.cgi allows authenticated command injection.