DLink DCS-936L Network Camera Cross-Site Request Forgery Vulnerability

Exploit for hardware platform in category web applications Exploit Title: D-Link DCS-936L network camera incomplete/weak CSRF protection vulnerability Date: 26/03/2017 Exploit Author: SlidingWindow , Twitter: @KapilKhot Vendor Homepage:...

CVE-2017-7851

The CVE-2017-7851 vulnerability affects D-Link DCS-936L network cameras with firmware before 1.05.07. The issue is an inadequate CSRF protection mechanism that requires the device IP address to be a substring of the HTTP Referer header, enabling cross-site request forgery. Impact details in conne...