Announcements > Security Advisories

DNS-320 (RevA) - Command Injection Vulnerability

(1/1)

GreenBay42:
Official Announcement - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10183

On July 7, 2020, D-Link was made aware of a Command Injection Vulnerability report by Swing of Chaitin Security Research Lab affecting the D-Link Network Attached Storage (NAS): DNS-320 Revision Ax. This disclosures is referenced as CVE-2020-25506

All US consumers using the DNS-320 hardware revision Ax, are recommended to immediately retire and replace the device.

Navigation

[0] Message Index

Go to full version