D-Link DCS-5009, DCS-5010 and DCS-5020L Remote Code Execution Vulnerability

D-Link DCS-5009, DCS-5010 and DCS-5020L are all different models of network camera products from AUO D-Link. alphapd is one of the web servers. A remote code execution vulnerability exists in alphapd in the D-Link DCS-5009 with firmware version 1.08.11 and earlier, DCS-5010 with firmware version...

Command injection

On D-Link DCS-5009 devices with firmware 1.08.11 and earlier, DCS-5010 devices with firmware 1.14.09 and earlier, and DCS-5020L devices with firmware before 1.15.01, command injection in alphapd binary responsible for running the camera's web server allows remote authenticated attackers to execut...

PT-2018-6385 · D Link · D-Link Dcs-5009 +2

Name of the Vulnerable Software and Affected Versions: D-Link DCS-5009 versions 1.08.11 and earlier D-Link DCS-5010 versions 1.14.09 and earlier D-Link DCS-5020L versions prior to 1.15.01 Description: The issue allows remote authenticated attackers to execute code through command injection in the...