Dcs 7517 Firmware
Monthly
Hard-coded password in D-Link DCS-7517 firmware up to 2.02.0 allows remote attackers to bypass authentication via the Qlync Password Generation Handler. The vulnerability has a high attack complexity and exploitability is reported as difficult, but a public proof-of-concept exists. It is classified as problematic and only affects an end-of-life product, limiting real-world urgency.
Insufficient entropy in root password generation allows remote attackers to predict administrator credentials on D-Link DCS-6517 and DCS-7517 cameras running firmware up to 2.02.0. The vulnerability arises from the generate_pass_from_mac function, enabling password disclosure via a high-complexity attack. Public exploit code is available, but the products are end-of-life and no longer supported.
Hard-coded password in D-Link DCS-7517 firmware up to 2.02.0 allows remote attackers to bypass authentication via the Qlync Password Generation Handler. The vulnerability has a high attack complexity and exploitability is reported as difficult, but a public proof-of-concept exists. It is classified as problematic and only affects an end-of-life product, limiting real-world urgency.
Insufficient entropy in root password generation allows remote attackers to predict administrator credentials on D-Link DCS-6517 and DCS-7517 cameras running firmware up to 2.02.0. The vulnerability arises from the generate_pass_from_mac function, enabling password disclosure via a high-complexity attack. Public exploit code is available, but the products are end-of-life and no longer supported.