CVE-2021-41504

An Elevated Privileges issue exists in D-Link DCS-5000L v1.05 and DCS-932L v2.17 and older. The use of the digest-authentication for the devices command interface may allow further attack vectors that may compromise the cameras configuration and allow malicious users on the LAN to access the...

EUVD-2018-10169

Malware in sbrugna...

D-Link CGI Bin Script Injection

The vulnerability in the cgi-bin/ddnsenc.cg script of the D-Link DCS-2530L and DCS-2670L microprogramming systems for IP cameras is related to the lack of measures taken at the management level to clean data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality,...

EUVD-2023-56340

Malicious code in bioql PyPI...

CISA Adds 3 D-Link Vulnerabilities to KEV Catalog Amid Active Exploitation Evidence

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added three old security flaws impacting D-Link Wi-Fi cameras and video recorders to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation in the wild. The high-severity vulnerabilities,...

D-Link DCS-932L camera software Sub_404780 Heap Buffer Overflow

The vulnerability of the sub404780 function in the /bin/gpio file of D-Link DCS-932L microprogrammed software cameras is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2023-51627

D-Link DCS-8300LHV2 ONVIF Duration Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP cameras. Although authentication is required to exploit this...

D-Link ONVIF Code Execution

The vulnerability of the ONVIF application programming interface for D-Link’s DCS-8300LHV2 Wi-Fi cameras exists due to the lack of measures taken to neutralize certain components. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

CVE-2021-41504

An Elevated Privileges issue exists in D-Link DCS-5000L v1.05 and DCS-932L v2.17 and older. The use of the digest-authentication for the devices command interface may allow further attack vectors that may compromise the cameras configuration and allow malicious users on the LAN to access the...

CVE-2021-41504

An Elevated Privileges issue exists in D-Link DCS-5000L v1.05 and DCS-932L v2.17 and older. The use of the digest-authentication for the devices command interface may allow further attack vectors that may compromise the cameras configuration and allow malicious users on the LAN to access the...

D-link Dcs-932L和D-link Dcs-5000L 授权问题漏洞

D-link Dcs-5000L is an Ip network surveillance camera. d-link Dcs-932L is a network surveillance camera. a security vulnerability exists in the D-Link DCS-5000L and DCS-932L, which stems from the lack of an effective trust management mechanism in the network system or product. An attacker could...

VulnCheck KEV: CVE-2020-25078

D-Link DCS-2530L and DCS-2670L devices contains an unspecified vulnerability that could allow for remote administrator password disclosure. The impacted products could be end-of-life EoL and/or end-of-service EoS. Users should discontinue product utilization...

VulnCheck KEV: CVE-2013-1599

A Command Injection vulnerability exists in the /var/www/cgi-bin/rtpd.cgi script in D-Link IP Cameras DCS-3411/3430 firmware 1.02, DCS-5605/5635 1.01, DCS-1100L/1130L 1.04, DCS-1100/1130 1.03, DCS-1100/1130 1.04US, DCS-2102/2121 1.05RU, DCS-3410 1.02, DCS-5230 1.02, DCS-5230L 1.02, DCS-6410 1.00,...

CVE-2020-25078

An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticated /config/getuser endpoint allows for remote administrator password disclosure...

HNAP D-Link wireless HD cameras Code Execution

The vulnerability of the HNAP microprogramming software for D-Link’s wireless HD cameras of the DCS series lies in buffer overflow in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target device by sending a specially crafted SOAP request to the...

CVE-2013-1600

An Authentication Bypass vulnerability exists in upnp/asf-mp4.asf when streaming live video in D-Link TESCO DCS-2121 1.05TESCO, TESCO DCS-2102 1.05TESCO, DCS-2121 1.06FR, 1.06, and 1.05RU, DCS-2102 1.06FR. 1.06, and 1.05RU, which could let a malicious user obtain sensitive information...

CVE-2013-1602

An Information Disclosure vulnerability exists due to insufficient validation of authentication cookies for the RTSP session in D-Link DCS-5635 1.01, DCS-1100L 1.04, DCS-1130L 1.04, DCS-1100 1.03/1.04US, DCS-1130 1.03/1.04US , DCS-2102 1.05RU/1.06/1.06FR/1.05TESCO, DCS-2121...

PT-2020-7359

Name of the Vulnerable Software and Affected Versions: D-Link IP Cameras DCS-3411/3430 version 1.02 D-Link IP Cameras DCS-5605/5635 version 1.01 D-Link IP Cameras DCS-1100L/1130L version 1.04 D-Link IP Cameras DCS-1100/1130 version 1.03 D-Link IP Cameras DCS-1100/1130 version 1.04 US D-Link IP...

alphapd Component Code Execution

The vulnerability of the alphapd component in D-Link’s DCS series Wi-Fi cameras arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request...

D-Link DCS-1100 and D-Link DCS-1130 Cross-Site Request Forgery Vulnerabilities (CNVD-2019-23333)

The D-Link DCS-1100 and the D-Link DCS-1130 are both network cameras from Taiwan, China-based AUO D-Link. A cross-site request forgery vulnerability exists in the D-Link DCS-1100 and DCS-1130. An attacker could exploit this vulnerability to execute arbitrary commands on the device...