{"id":"CVE-2020-25078","aliases":[],"url":"https://o3.security/vulnerability/CVE-2020-25078","summary":"An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticated /config/getuser endpoint allows for remote administrator password disclosure.","details":"An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticated /config/getuser endpoint allows for remote administrator password disclosure.","published":"2020-09-02T16:15:12.627","modified":"2026-06-17T03:06:20.660","cvss":{"score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},"epss":{"score":0.97901,"percentile":0.99905,"asOf":"2026-09-17"},"cisaKev":{"dateAdded":"2025-08-05","dueDate":"2025-08-26","knownRansomwareCampaignUse":false},"exploitsKnown":5,"affectedPackages":[],"fix":null,"references":[{"type":"FIX","url":"https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10180"},{"type":"ADVISORY","url":"https://twitter.com/Dogonsecurity/status/1273251236167516161"},{"type":"FIX","url":"https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10180"},{"type":"ADVISORY","url":"https://twitter.com/Dogonsecurity/status/1273251236167516161"},{"type":"WEB","url":"https://support.dlink.com/productinfo.aspx?m=DCS-2530L"},{"type":"WEB","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-25078"}],"provenance":{"sources":["OSV.dev","NVD","CISA KEV","FIRST.org (EPSS)"],"lastVerified":"2026-06-17T03:06:20.660"}}