CVE-2017-7852

CVE-2017-7852 affects D-Link DCS series cameras (notably DCS-933L, DCS-5030L, DCS-5020L, DCS-2530L, DCS-2630L, DCS-930L, DCS-932L, DCS-932LB1). Root cause: weak CrossDomain.XML with allow-access-from set to * enables Cross-Site Request Forgery (CSRF) via malicious Flash hosted on attacker sites. ...

CVE-2021-41504

CVE-2021-41504 affects D-Link DCS-5000L (v1.05) and DCS-932L (v2.17) and older. The root cause is the use of digest-authentication for the devices command interface, which may enable elevated privileges and allow a malicious LAN user to access or alter the cameras’ configuration. This vulnerabili...