---
title: "Faille de securité D-Link : /config/getuser?index=0 (CVE-2020-25078)"
url: https://www.cyber-neurones.org/2021/10/faille-de-securite-d-link-config-getuserindex0-cve-2020-25078/
date: 2021-10-13
modified: 2021-10-13
author: "Frederic"
description: "Liste des IP qui exploitent cette faille : # grep \"/config/getuser?index\" /var/log/apache2/access.* | sed \"s/:/ /g\" | awk '{print $2}' | sort | uniq 185.239.242.117 198.12.85.84 209.141.56.212 209.141.62.18 # iptables..."
categories:
  - "Sécurité"
tags:
  - "iptables"
word_count: 73
---

# Faille de securité D-Link : /config/getuser?index=0 (CVE-2020-25078)

Liste des IP qui exploitent cette faille :
# grep "/config/getuser?index" /var/log/apache2/access.* | sed "s/:/ /g" | awk '{print $2}' | sort | uniq
185.239.242.117
198.12.85.84
209.141.56.212
209.141.62.18
# iptables -A INPUT -s 185.239.242.117 -j DROP
# iptables -A INPUT -s 198.12.85.84 -j DROP
# iptables -A INPUT -s 209.141.56.212 -j DROP
# iptables -A INPUT -s 209.141.62.185 -j DROP
# /usr/sbin/iptables-save > /etc/iptables/rules.v4

Pour plus d'information voir : [https://nvd.nist.gov/vuln/detail/CVE-2020-25078](https://nvd.nist.gov/vuln/detail/CVE-2020-25078) .

A suivre.