EUVD-2017-3179

Malware in sbrugna...

CVE-2017-11564

The D-Link EyeOn Baby Monitor DCS-825L 1.08.1 has multiple command injection vulnerabilities in the web service framework. An attacker can forge malicious HTTP requests to execute commands; authentication is required before executing the attack...

CVE-2017-11564

The D-Link EyeOn Baby Monitor DCS-825L 1.08.1 has multiple command injection vulnerabilities in the web service framework. An attacker can forge malicious HTTP requests to execute commands; authentication is required before executing the attack...

CVE-2017-11563

D-Link EyeOn Baby Monitor DCS-825L 1.08.1 has a remote code execution vulnerability. A UDP "Discover" service, which provides multiple functions such as changing the passwords and getting basic information, was installed on the device. A remote attacker can send a crafted UDP request to finderd t...

CVE-2017-11563

D-Link EyeOn Baby Monitor DCS-825L 1.08.1 has a remote code execution vulnerability. A UDP "Discover" service, which provides multiple functions such as changing the passwords and getting basic information, was installed on the device. A remote attacker can send a crafted UDP request to finderd t...

PT-2018-5328

Name of the Vulnerable Software and Affected Versions D-Link EyeOn Baby Monitor DCS-825L version 1.08.1 Description The issue allows an attacker to execute commands by forging malicious HTTP requests to the web service framework, but authentication is required before the attack can be executed...

CVE-2017-11564: Out-of-bounds Write

The D-Link EyeOn Baby Monitor DCS-825L 1.08.1 has multiple command injection vulnerabilities in the web service framework. An attacker can forge malicious HTTP requests to execute commands; authentication is required before executing the attack...

CVE-2017-11563: Improper Restriction of Operations within the Bounds of a Memory Buffer

D-Link EyeOn Baby Monitor DCS-825L 1.08.1 has a remote code execution vulnerability. A UDP "Discover" service, which provides multiple functions such as changing the passwords and getting basic information, was installed on the device. A remote attacker can send a crafted UDP request to finderd t...

PT-2018-5327

Name of the Vulnerable Software and Affected Versions D-Link EyeOn Baby Monitor DCS-825L version 1.08.1 Description The issue allows a remote attacker to execute arbitrary code with root privilege on the device by sending a crafted UDP request to the "Discover" service, which can lead to a stack...

Multiple Command Injection Vulnerabilities in D-Link EyeOn Baby Monitor DCS-825L

EyeOn Baby Monitor DCS-825L is a baby monitor from D-Link. The D-Link EyeOn Baby Monitor DCS-825L suffers from multiple command injection vulnerabilities that could allow an attacker to send a crafted request to execute a command...