CVE-2020-25078 Scanner.
D-Link DCS-2530L/DCS-2670L - Administrator Password Disclosure
Free and read-only. Scan only sites you own or are allowed to test.
What This Check Does.
Read-only
It only asks your site for public pages, the way a browser would. Nothing is changed, uploaded or stored.
Up to 1 request
A small, fixed number of requests, so the check is quick and will not load your site.
Looks for CVE-2020-25078
It looks for the specific sign of this one vulnerability and ends with a clear answer: vulnerable, not vulnerable, or could not be determined.
About CVE-2020-25078. What It Means.
D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices are vulnerable to password disclosures vulnerabilities because the /config/getuser endpoint allows for remote administrator password disclosure.
FAQ
Common Questions.
D-Link DCS-2530L/DCS-2670L - Administrator Password Disclosure. D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices are vulnerable to password disclosures vulnerabilities because the /config/getuser endpoint allows for remote administrator password disclosure.
Atlas sends up to 1 read-only request to your site and looks for the specific sign of CVE-2020-25078 in D-Link DCS-2530L Firmware. Nothing is changed, uploaded or stored on your site.
Yes. CVE-2020-25078 is on the CISA Known Exploited Vulnerabilities list, which means attackers have used it against real targets.
Yes. The check only reads public pages, the same way a browser or a search engine would. Scan only sites you own or are allowed to test.
It means no sign of CVE-2020-25078 was found by this read-only check. It does not prove the site is free of other weaknesses.
Update D-Link DCS-2530L Firmware to the latest version from the vendor, or follow the vendor's advice to switch off the affected feature. The vendor links and details are in the CVE-2020-25078 briefing linked on this page.
Scan only sites you own or have written permission to test. A result of Not Vulnerable means this read-only check found no sign of CVE-2020-25078; it is not a guarantee that the site is secure.