CVE-2019-17146

This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link DCS-960L v1.07.102. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HNAP service, which listens on TCP port 80 by default. When parsing the...

Stack overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link DCS-960L v1.07.102. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HNAP service, which listens on TCP port 80 by default. When parsing the...

CVE-2019-17146

The CVE covers a vulnerability in D-Link DCS-960L (v1.07.102) where the HNAP service on port 80 improperly validates the length of user-supplied data in SOAPAction headers, leading to a stack-based overflow and remote code execution as the admin user. Multiple sources (ZDI advisory ZDI-19-1031, N...

CVE-2019-17146: Stack-based Buffer Overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link DCS-960L v1.07.102. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HNAP service, which listens on TCP port 80 by default. When parsing the...

D-Link DCS-960L Buffer Overflow Remote Code Execution Vulnerability

The D-Link DCS-960L is a webcam product from D-Link, a Taiwan-based company. A security vulnerability exists in the HNAP service in the D-Link DCS-960L. An attacker can exploit the vulnerability to execute code in the context of the admin user...

PT-2019-4635

Name of the Vulnerable Software and Affected Versions D-Link DCS-960L version 1.07.102 Description The issue is related to a buffer overflow in the memory of the HNAP service of D-Link DCS series Wi-Fi cameras, allowing a remote attacker to execute arbitrary code on the target device by sending a...

D-Link DCS-960L HNAP SOAPAction Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link DCS-960L. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HNAP service, which listens on TCP port 80 by default. When parsing the SOAPAction...

D-Link DCS-1100 and D-Link DCS-1130 Cross-Site Request Forgery Vulnerabilities (CNVD-2019-23334)

The D-Link DCS-1100 and the D-Link DCS-1130 are both network cameras from Taiwan, China-based AUO D-Link. A cross-site request forgery vulnerability exists in the D-Link DCS-1100 and DCS-1130. An attacker can exploit the vulnerability by sending simple UDP packets to access the management interfa...

D-Link DCS-1100 and D-Link DCS-1130 Cross-Site Request Forgery Vulnerabilities (CNVD-2019-23340)

The D-Link DCS-1100 and the D-Link DCS-1130 are both network cameras from Taiwan, China-based AUO D-Link. A cross-site request forgery vulnerability exists in the D-Link DCS-1100 and DCS-1130 devices. A local attacker could exploit this vulnerability to execute commands without authentication...

D-Link DCS-1130 Command Injection Vulnerability (CNVD-2019-21464)

The D-Link DCS-1130 is a network camera from Taiwan, China-based AUO D-Link. A command injection vulnerability exists in the Snapshot feature of the D-Link DCS-1130. The vulnerability arises from a network system or product not properly filtering specific elements of externally input data during...

D-Link DCS-1130 Cross-Site Request Forgery Vulnerability (CNVD-2019-23339)

The D-Link DCS-1130 is a network camera from Taiwan, China-based AUO D-Link. A cross-site request forgery vulnerability exists in the D-Link DCS-1130. An attacker can exploit the vulnerability to view live video images...

D-Link DCS-1130 Cross-Site Request Forgery Vulnerability (CNVD-2019-23341)

The D-Link DCS-1130 is a network camera from Taiwan, China-based AUO D-Link. A security vulnerability exists in the D-Link DCS-1130. An attacker can exploit the vulnerability to steal the credentials of an administrative user, control the device as admin user, execute arbitrary code, or change th...

D-Link DCS-1130 Cross-Site Request Forgery Vulnerability

The D-Link DCS-1130 is a network camera from Taiwan, China-based AUO D-Link. A security vulnerability exists in the D-Link DCS-1130, which arises from the program's failure to implement an arbitrary cross-site request forgery protection mechanism. The vulnerability can be exploited by an attacker...

D-Link DCS-1130 Command Injection Vulnerability (CNVD-2019-21077)

The D-Link DCS-1130 is a network camera from Taiwan, China-based AUO D-Link. A command injection vulnerability exists in the Video feature in the D-Link DCS-1130. An attacker can exploit this vulnerability to take control of the device and execute arbitrary code...

D-Link DCS-1100 and D-Link DCS-1130 Buffer Error Vulnerability

The D-Link DCS-1100 and the D-Link DCS-1130 are both network cameras from Taiwan, China-based AUO D-Link. A buffer error vulnerability exists in RTSPD in the D-Link DCS-1100 and DCS-1130. An attacker could use this vulnerability to take full control of the device and view images captured by the...

D-Link DCS-1100 and D-Link DCS-1130 Buffer Error Vulnerability (CNVD-2019-21249)

The D-Link DCS-1100 and the D-Link DCS-1130 are both network cameras from Taiwan, China-based AUO D-Link. A buffer error vulnerability exists in the D-Link DCS-1100 and DCS-1130. A local attacker could exploit this vulnerability to execute arbitrary commands on the device without authentication...

CVE-2017-8412

An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device has a custom binary called mp4ts under the /var/www/video folder. It seems that this binary dumps the HTTP VERB in the system logs. As a part of doing that it retrieves the HTTP VERB sent by the user and uses a vulnerable...

Design/Logic Flaw

An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device runs a custom daemon on UDP port 5978 which is called "dldps2121" and listens for broadcast packets sent on 255.255.255.255. This daemon handles custom D-Link UDP based protocol that allows D-Link mobile applications and...

Hardcoded credentials

An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device has a custom telnet daemon as a part of the busybox and retrieves the password from the shadow file using the function getspnam at address 0x00053894. Then performs a crypt operation on the password retrieved from the use...

CVE-2017-8416

The CVE-2017-8416 issue affects D-Link DCS-1100 and DCS-1130 devices. A daemon listening on UDP port 5978 processes a custom discovery protocol; an unbounded copy (strcpy) within packet handling can overflow the stack, enabling remote code execution. An attacker on the local network can trigger t...