EUVD-2017-3179

Malware in sbrugna...

CVE-2017-11564

The D-Link EyeOn Baby Monitor DCS-825L 1.08.1 has multiple command injection vulnerabilities in the web service framework. An attacker can forge malicious HTTP requests to execute commands; authentication is required before executing the attack...

CVE-2017-11563

D-Link EyeOn Baby Monitor DCS-825L 1.08.1 has a remote code execution vulnerability. A UDP "Discover" service, which provides multiple functions such as changing the passwords and getting basic information, was installed on the device. A remote attacker can send a crafted UDP request to finderd t...

Command injection

The D-Link EyeOn Baby Monitor DCS-825L 1.08.1 has multiple command injection vulnerabilities in the web service framework. An attacker can forge malicious HTTP requests to execute commands; authentication is required before executing the attack...

CVE-2017-11564

The D-Link EyeOn Baby Monitor DCS-825L 1.08.1 has multiple command injection vulnerabilities in the web service framework. An attacker can forge malicious HTTP requests to execute commands; authentication is required before executing the attack...

CVE-2017-11563

D-Link EyeOn Baby Monitor DCS-825L 1.08.1 has a remote code execution vulnerability. A UDP "Discover" service, which provides multiple functions such as changing the passwords and getting basic information, was installed on the device. A remote attacker can send a crafted UDP request to finderd t...

CVE-2017-11564

The CVE-2017-11564 entry concerns the D-Link EyeOn Baby Monitor (DCS-825L) running 1.08.1, which has multiple command-injection vulnerabilities in its web service framework. The issue allows an attacker to forge crafted HTTP requests to execute commands, with authentication required before the at...

CVE-2017-11563

The CVE-2017-11563 vulnerability affects the D-Link EyeOn Baby Monitor (DCS-825L) with firmware 1.08.1. A UDP Discover service on the device runs a finder process; a crafted UDP request can trigger a stack overflow, allowing remote code execution with root privileges. The vulnerability is network...

CVE-2017-11563

D-Link EyeOn Baby Monitor DCS-825L 1.08.1 has a remote code execution vulnerability. A UDP "Discover" service, which provides multiple functions such as changing the passwords and getting basic information, was installed on the device. A remote attacker can send a crafted UDP request to finderd t...

CVE-2017-11564: Out-of-bounds Write

The D-Link EyeOn Baby Monitor DCS-825L 1.08.1 has multiple command injection vulnerabilities in the web service framework. An attacker can forge malicious HTTP requests to execute commands; authentication is required before executing the attack...

CVE-2017-11563: Improper Restriction of Operations within the Bounds of a Memory Buffer

D-Link EyeOn Baby Monitor DCS-825L 1.08.1 has a remote code execution vulnerability. A UDP "Discover" service, which provides multiple functions such as changing the passwords and getting basic information, was installed on the device. A remote attacker can send a crafted UDP request to finderd t...

Multiple Command Injection Vulnerabilities in D-Link EyeOn Baby Monitor DCS-825L

EyeOn Baby Monitor DCS-825L is a baby monitor from D-Link. The D-Link EyeOn Baby Monitor DCS-825L suffers from multiple command injection vulnerabilities that could allow an attacker to send a crafted request to execute a command...

D-Link EyeOn Baby Monitor DCS-825L Stack Overflow Remote Code Execution Vulnerability

EyeOn Baby Monitor DCS-825L is a baby monitor from D-Link. The D-Link EyeOn Baby Monitor DCS-825L suffers from a stack overflow remote code execution vulnerability that allows a remote attacker to send a crafted request to the finder and execute arbitrary code without authentication...