D-Link · DNS-320 Device

CVE-2020-25506

D-Link DNS-320 Device Command Injection Vulnerability

Exploited in attacks Critical 9.8 Attack chance: >99.9%

What it is

D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead to remote arbitrary code execution.

CISA: D-Link DNS-320 device contains a command injection vulnerability in the sytem_mgr.cgi component that may allow for remote code execution.

What to do

Apply updates per vendor instructions.

Deadline for US federal agencies: May 3, 2022

Added to the CISA list: November 3, 2021
Published: February 2, 2021
Severity: Critical 9.8 CVSS 3.1
Chance of attacks in the next 30 days (EPSS): >99.9% in the top 0.1% of all known vulnerabilities
Weakness: CWE-78
More details: NVD · CVE.org · CISA

All references (3)

More exploited flaws from D-Link

Added	Vulnerability	Product	Severity	Attack chance
Apr 24, 2026	Command InjectionCVE-2025-29635	DIR-823X	High 7.2	88%
Dec 8, 2025	Buffer OverflowCVE-2022-37055	Routers	Critical 9.8	56%
Aug 5, 2025	UnspecifiedCVE-2020-25078	DCS-2530L and DCS-2670L Devices	High 7.5	98%
Aug 5, 2025	DCS-2530L and DCS-2670L Command InjectionCVE-2020-25079	DCS-2530L and DCS-2670L Devices	High 8.8	54%
Aug 5, 2025	Download of Code Without Integrity CheckCVE-2022-40799	DNR-322L	High 8.8	34%
Jun 25, 2025	D-Link DIR-859 Router Path TraversalCVE-2024-0769	DIR-859 Router	Medium 5.3	83%
Sep 30, 2024	OS Command InjectionCVE-2023-25280	DIR-820 Router	Critical 9.8	98%
May 16, 2024	Information DisclosureCVE-2021-40655	DIR-605 Router	High 7.5	87%

All of them →

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.