Medium severity5.5NVD Advisory· Published Oct 8, 2020· Updated Jun 17, 2026

CVE-2020-26567

Description

An issue was discovered on D-Link DSR-250N before 3.17B devices. The CGI script upgradeStatusReboot.cgi can be accessed without authentication. Any access reboots the device, rendering it therefore unusable for several minutes.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dlink/Dsr 250n Firmware
cpe:2.3:o:dlink:dsr-250n_firmware:*:*:*:*:*:*:*:*
Range: <3.17b
D-Link/DSR-250Ndescription
Dlink/DSR-250Nllm-create
Range: <3.17B

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/159516/D-Link-DSR-250N-Denial-Of-Service.htmlnvdExploitMitigationPatchThird Party AdvisoryVDB Entry
seclists.org/fulldisclosure/2020/Oct/14nvdExploitMailing ListMitigationPatchThird Party Advisory
www.redteam-pentesting.de/advisories/rt-sa-2020-002nvdExploitMitigationPatchThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.014
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000