CVE-2013-1599

CVE-2013-1599 is a remote OS command-injection vulnerability in the D-Link IP cameras’ web interface, specifically in /var/www/cgi-bin/rtpd.cgi. A remote attacker can craft a request to trigger arbitrary command execution on affected devices. Affected devices include DCS-3411/3430 (1.02), DCS-560...

CVE-2013-1602

CVE-2013-1602 describes an information-disclosure and authentication-bypass vulnerability in several D-Link IP cameras (e.g., DCS-5635, DCS-1100/1130/1100L/1130L, DCS-2102/2121, DCS-3410/5230/5610, WCS-1100, etc.). The root cause is insufficient validation of RTSP authentication cookies, enabling...

CVE-2013-1603

Summary of CVE-2013-1603 and related D-Link IP Camera vulnerabilities (CVE‑2013‑1599, -1600, -1601, -1602, -1603): Core Security’s CORE-2013-0303 advisory documents OS command injection, several authentication issues, information leakage, and hard-coded credentials affecting D‑Link IP cameras (mo...

CVE-2013-1600

CVE-2013-1600 is an Authentication Bypass affecting multiple D-Link IP cameras (notably DCS-2102/2121 series with firmware such as 1.05_TESCO, 1.05_RU, 1.06, 1.06_FR, etc.). The vulnerability allows remote attackers to access live video streams without authentication via HTTP by exploiting the up...

CVE-2013-1601

CVE-2013-1601 is an information-disclosure vulnerability in D-Link IP cameras where an unauthenticated attacker can access an ASCII output of the live video stream via /md/lums.cgi. Connected sources (CoreLabs CORE-2013-0303) confirm this vulnerability alongside related CVEs (1599, 1600, 1602, 16...