EUVD-2010-4929

Malware in sbrugna...

CVE-2010-4964

recordertest.cgi on the D-Link DCS-2121 camera with firmware 1.04 allows remote attackers to execute arbitrary commands via shell metacharacters in the Password field, related to a "semicolon injection" vulnerability...

CVE-2010-4965

/etc/rc.d/rc.local on the D-Link DCS-2121 camera with firmware 1.04 configures a hardcoded password of admin for the root account, which makes it easier for remote attackers to obtain shell access by leveraging a running telnetd server...

PT-2020-7360

Name of the Vulnerable Software and Affected Versions: D-Link DCS-2121 versions 1.05 TESCO through 1.06 D-Link DCS-2102 versions 1.05 TESCO through 1.06 Description: An Authentication Bypass issue exists in the upnp/asf-mp4.asf component when streaming live video, potentially allowing a malicious...

CVE-2010-4965

/etc/rc.d/rc.local on the D-Link DCS-2121 camera with firmware 1.04 configures a hardcoded password of admin for the root account, which makes it easier for remote attackers to obtain shell access by leveraging a running telnetd server...

Hardcoded credentials

/etc/rc.d/rc.local on the D-Link DCS-2121 camera with firmware 1.04 configures a hardcoded password of admin for the root account, which makes it easier for remote attackers to obtain shell access by leveraging a running telnetd server...

CVE-2010-4965

/etc/rc.d/rc.local on the D-Link DCS-2121 camera with firmware 1.04 configures a hardcoded password of admin for the root account, which makes it easier for remote attackers to obtain shell access by leveraging a running telnetd server...

CVE-2010-4964: Improper Control of Generation of Code

recordertest.cgi on the D-Link DCS-2121 camera with firmware 1.04 allows remote attackers to execute arbitrary commands via shell metacharacters in the Password field, related to a "semicolon injection" vulnerability...

PT-2011-1899

Name of the Vulnerable Software and Affected Versions D-Link DCS-2121 camera version 1.04 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the Password field, related to a semicolon injection. This occurs in the recorder test.cgi file...

CVE-2010-4965: Undefined Security Weakness

/etc/rc.d/rc.local on the D-Link DCS-2121 camera with firmware 1.04 configures a hardcoded password of admin for the root account, which makes it easier for remote attackers to obtain shell access by leveraging a running telnetd server...