[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCcXk4wHRrDlCP5_eO4HlGCz_2krN1Oe_SOCLMjFYX4M":3,"g5a-risk:CVE-2020-15894":125},{"success":4,"data":5,"meta":123},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":55,"references":56,"referencesCount":68,"weaknesses":69,"weaknessesCount":78,"isActivelyExploited":79,"cisaInfo":26,"otxData":26,"relatedBlogPosts":80,"seoMetadata":81,"configurations":106,"relatedVendorCves":121,"notableEvents":122},"CVE-2020-15894","What is CVE-2020-15894?","An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. There exists an exposed administration function in getcfg.php, which can be used to call various services. It can be utilized by an attacker to retrieve various sensitive information, such as admin login credentials, by setting the value of _POST_SERVICES in the query string to DEVICE.ACCOUNT.","An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. There exists an exposed administration function in getcfg.php, which can be used...","2020-07-22T19:15:12.71","2023-11-08T22:49:55.577",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.01688,[39,39,39,39,39,39,39],"High",[43,48,51],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"dlink","dir-816l_firmware","2.06","cpe:2.3:o:dlink:dir-816l_firmware:2.06:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":49,"criteria":50,"vulnerable":4},"2.06.b09","cpe:2.3:o:dlink:dir-816l_firmware:2.06.b09:beta:*:*:*:*:*:*",{"vendor":44,"product":52,"version":53,"criteria":54,"vulnerable":4},"dir-816l","b1","cpe:2.3:h:dlink:dir-816l:b1:*:*:*:*:*:*:*",3,[57,62],{"url":58,"source":59,"tags":60},"https:\u002F\u002Fresearch.loginsoft.com\u002Fbugs\u002Fmultiple-vulnerabilities-discovered-in-the-d-link-firmware-dir-816l\u002F","Loginsoft",[61],"Third Party Advisory",{"url":63,"source":64,"tags":65},"https:\u002F\u002Fsupportannouncement.us.dlink.com\u002Fannouncement\u002Fpublication.aspx?name=SAP10169","Dlink",[66,67],"Patch","Vendor Advisory",2,[70],{"id":71,"name":72,"description":73,"extendedDescription":74,"status":75,"abstraction":76,"structure":77},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","","Draft","Base","Simple",1,false,[],{"title":82,"metaDescription":83,"keywords":84,"canonicalUrl":85,"structuredData":86},"What is CVE-2020-15894? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-15894, a high severity cyber security vulnerability from 2020. An issue was discovered on D-Link DIR-816L devices 2.x befo...","CVE-2020-15894, CVE-2020-15894 vulnerability, CVE-2020-15894 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, dlink security, dir-816l_firmware vulnerability, dir-816l vulnerability","\u002Fwhat-is\u002Fcve-2020-15894",{"@context":87,"@type":88,"headline":82,"description":83,"datePublished":10,"dateModified":11,"author":89,"publisher":93,"about":97,"mainEntityOfPage":101,"articleSection":104,"keywords":105},"https:\u002F\u002Fschema.org","TechArticle",{"@type":90,"name":91,"url":92},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":90,"name":91,"url":92,"logo":94},{"@type":95,"url":96},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":98,"name":6,"description":99,"additionalType":100},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":102,"@id":103},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-15894","Cybersecurity","CVE-2020-15894, CVE-2020-15894 vulnerability, CVE-2020-15894 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[107],{"Operator":108,"Negate":26,"Nodes":109},"AND",[110,117],{"Operator":111,"Negate":26,"CPEMatch":112},"OR",[113,115],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":114,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1817EE29-D782-4A98-A478-20BDA559C5CE",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":116,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"ABE7E66F-20B2-4A39-A845-03E5FBBD9E2A",{"Operator":111,"Negate":26,"CPEMatch":118},[119],{"Vulnerable":26,"Criteria":54,"MatchCriteriaID":120,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"637B2D4B-0EA7-4E30-9B2B-77484D701042",[],[],{"lastModified":11,"cacheTime":124,"version":32},1792364895934,{"score":126,"band":127,"action":128,"scoredAt":129},46,"Medium","Plan remediation","2026-10-16T06:49:03.346713+00:00"]