CVE-2019-10999

The CVE-2019-10999 issue affects D-Link DCS series cameras with the alphapd web server, via a stack-based buffer overflow triggered by a long WEPEncryption value in wireless.htm. Root cause: improper handling in alphapd leading to remote code execution. Affected devices include DCS-5009L, 5010L, ...

CVE-2017-7852

CVE-2017-7852 affects D-Link DCS series cameras (notably DCS-933L, DCS-5030L, DCS-5020L, DCS-2530L, DCS-2630L, DCS-930L, DCS-932L, DCS-932LB1). Root cause: weak CrossDomain.XML with allow-access-from set to * enables Cross-Site Request Forgery (CSRF) via malicious Flash hosted on attacker sites. ...

CVE-2018-18441

CVE-2018-18441 affects D-Link DCS series Wi‑Fi cameras (e.g., DCS-936L, DCS-942L, DCS-8000LH, DCS-5222L, DCS-825L, DCS-2630L, DCS-820L, DCS-855L, DCS-2121, DCS-5020L, etc.). The vulnerability stems from the /common/info.cgi endpoint being accessible without authentication, allowing remote access ...

CVE-2017-17020

CVE-2017-17020 affects D-Link DCS-5009 (firmware ≤1.08.11), DCS-5010 (≤1.14.09), and DCS-5020L (before 1.15.01). The vulnerability is a remote code execution via command injection in the alphapd web server process: a sanitized AdminID value in the /setSystemAdmin input is passed directly to syste...

CVE-2025-5215

D-Link DCS-5020L (firmware 1.01_B2) is affected by a buffer overflow in the function websReadEvent() of /rame/ptdc.cgi, caused by improper handling of the Authorization argument. This remote vulnerability can be triggered over the network and has been publicly disclosed; affected products are not...