CVE-2017-7852

🗓️ 24 Apr 2017 10:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 78 Views

D-Link DCS cameras have weak/insecure CrossDomain.XML file, allowing CSRF attacks via a malicious Flash file from any domain

Reporter	Title	Published	Views	Family All 10
0day.today	DLink DCS Series Cameras - Insecure Crossdomain Vulnerability	26 May 201700:00	–	zdt
CNVD	D-Link DCS Cross-Site Forgery Request Vulnerability	26 Apr 201700:00	–	cnvd
Cvelist	CVE-2017-7852	24 Apr 201710:00	–	cvelist
Exploit DB	D-Link DCS Series Cameras - Insecure Crossdomain	22 Feb 201700:00	–	exploitdb
EUVD	EUVD-2017-16827	7 Oct 202500:30	–	euvd
exploitpack	D-Link DCS Series Cameras - Insecure Crossdomain	22 Feb 201700:00	–	exploitpack
NVD	CVE-2017-7852	24 Apr 201710:59	–	nvd
Packet Storm	D-Link DCS Series Cameras Insecure Crossdomain.xml	27 May 201700:00	–	packetstorm
Prion	Cross site request forgery (csrf)	24 Apr 201710:59	–	prion
Positive Technologies	PT-2017-17954 · D Link · Dcs-932Lb1 +7	24 Apr 201700:00	–	ptsecurity

NVD

Node

dlink dcs-2230l_firmwareRange≤1.03.01

AND

dlink dcs-2230lMatch-

Node

dlink dcs-2310l_firmwareRange≤1.08.01

AND

dlink dcs-2310lMatch-

Node

dlink dcs-2332l_firmwareRange≤1.08.01

AND

dlink dcs-2332lMatch-

Node

dlink dcs-6010l_firmwareRange≤1.15.01

AND

dlink dcs-6010lMatch-

Node

dlink dcs-7010l_firmwareRange≤1.08.01

AND

dlink dcs-7010lMatch-

Node

dlink dcs-2530l_firmwareRange≤1.00.21

AND

dlink dcs-2530lMatch-

Node

dlink dcs-930l_firmwareRange≤1.15.04

AND

dlink dcs-930lMatch-

Node

dlink dcs-930l_firmwareRange≤2.13.15

AND

dlink dcs-930lMatch-

Node

dlink dcs-932l_firmwareRange≤1.13.04

AND

dlink dcs-932lMatch-

Node

dlink dcs-932l_firmwareRange≤2.13.15

AND

dlink dcs-932lMatch-

Node

dlink dcs-934l_firmwareRange≤1.04.15

AND

dlink dcs-934lMatch-

Node

dlink dcs-942l_firmwareRange≤1.27

AND

dlink dcs-942lMatch-

Node

dlink dcs-942l_firmwareRange≤2.11.03

AND

dlink dcs-942lMatch-

Node

dlink dcs-931l_firmwareRange≤1.13.05

AND

dlink dcs-931lMatch-

Node

dlink dcs-933l_firmwareRange≤1.13.05

AND

dlink dcs-933lMatch-

Node

dlink dcs-5009l_firmwareRange≤1.07.05

AND

dlink dcs-5009lMatch-

Node

dlink dcs-5010l_firmwareRange≤1.13.05

AND

dlink dcs-5010lMatch-

Node

dlink dcs-5020l_firmwareRange≤1.13.05

AND

dlink dcs-5020lMatch-

Node

dlink dcs-5000l_firmwareRange≤1.02.02

AND

dlink dcs-5000lMatch-

Node

dlink dcs-5025l_firmwareRange≤1.02.10

AND

dlink dcs-5025lMatch-

Node

dlink dcs-5030l_firmwareRange≤1.01.06

AND

dlink dcs-5030lMatch-

Node

dlink dcs-2210l_firmwareRange≤1.03.01

AND

dlink dcs-2210lMatch-

Node

dlink dcs-2136l_firmwareRange≤1.04.01

AND

dlink dcs-2136lMatch-

Node

dlink dcs-2132l_firmwareRange≤1.08.01

AND

dlink dcs-2132lMatch-

Node

dlink dcs-7000l_firmwareRange≤1.04.00

AND

dlink dcs-7000lMatch-

Node

dlink dcs-6212l_firmwareRange≤1.00.12

AND

dlink dcs-6212lMatch-

Node

dlink dcs-5029l_firmwareRange≤1.12.00

AND

dlink dcs-5029lMatch-

Node

dlink dcs-2310l_firmwareRange≤2.03.00

AND

dlink dcs-2310lMatch-

Node

dlink dcs-2330l_firmwareRange≤1.13.00

AND

dlink dcs-2330lMatch-

Node

dlink dcs-2132l_firmwareRange≤2.12.00

AND

dlink dcs-2132lMatch-

Node

dlink dcs-5222l_firmwareRange≤2.12.00

AND

dlink dcs-5222lMatch-

Source	Link
qualys	www.qualys.com/2017/02/22/qsa-2017-02-22/qsa-2017-02-22.pdf

13 May 2026 00:24Current

8.5High risk

Vulners AI Score8.5

CVSS 26.8

CVSS 3.18.8

EPSS0.00498

cve d-link dcs cameras crossdomain.xml csrf attack flash security vulnerability firmware nvd