EUVD-2017-3179

Malware in sbrugna...

Command injection

The D-Link EyeOn Baby Monitor DCS-825L 1.08.1 has multiple command injection vulnerabilities in the web service framework. An attacker can forge malicious HTTP requests to execute commands; authentication is required before executing the attack...

CVE-2017-11563

D-Link EyeOn Baby Monitor DCS-825L 1.08.1 has a remote code execution vulnerability. A UDP "Discover" service, which provides multiple functions such as changing the passwords and getting basic information, was installed on the device. A remote attacker can send a crafted UDP request to finderd t...

CVE-2017-11563

D-Link EyeOn Baby Monitor DCS-825L 1.08.1 has a remote code execution vulnerability. A UDP "Discover" service, which provides multiple functions such as changing the passwords and getting basic information, was installed on the device. A remote attacker can send a crafted UDP request to finderd t...

CVE-2017-11564

The CVE-2017-11564 entry concerns the D-Link EyeOn Baby Monitor (DCS-825L) running 1.08.1, which has multiple command-injection vulnerabilities in its web service framework. The issue allows an attacker to forge crafted HTTP requests to execute commands, with authentication required before the at...

D-Link EyeOn Baby Monitor DCS-825L Stack Overflow Remote Code Execution Vulnerability

EyeOn Baby Monitor DCS-825L is a baby monitor from D-Link. The D-Link EyeOn Baby Monitor DCS-825L suffers from a stack overflow remote code execution vulnerability that allows a remote attacker to send a crafted request to the finder and execute arbitrary code without authentication...