Dcs 930L
Monthly
Improper verification of a cryptographic firmware signature in the D-Link DCS-930L (firmware B1.08B4) allows a remote attacker to supply a crafted firmware image that the device accepts and flashes, undermining the integrity of the bootloader recovery process. The flaw resides in the mpfd_decode function within bootloader_region.bin, part of the device's Emergency HTTP Recovery Server, which is normally reachable only when the camera is in firmware recovery/bootloader mode rather than in its default running state; exploitation therefore generally requires the device to be in (or forced into) recovery mode and network-reachable, plus the passive user interaction (UI:P) specified by the CVSS 4.0 vector. Publicly available exploit code exists and the input assigns a critical CVSS 4.0 base score of 9.4, but there is no confirmed active exploitation (not listed in CISA KEV) and the E:P metric indicates only Proof-of-Concept maturity.
Improper verification of a cryptographic firmware signature in the D-Link DCS-930L (firmware B1.08B4) allows a remote attacker to supply a crafted firmware image that the device accepts and flashes, undermining the integrity of the bootloader recovery process. The flaw resides in the mpfd_decode function within bootloader_region.bin, part of the device's Emergency HTTP Recovery Server, which is normally reachable only when the camera is in firmware recovery/bootloader mode rather than in its default running state; exploitation therefore generally requires the device to be in (or forced into) recovery mode and network-reachable, plus the passive user interaction (UI:P) specified by the CVSS 4.0 vector. Publicly available exploit code exists and the input assigns a critical CVSS 4.0 base score of 9.4, but there is no confirmed active exploitation (not listed in CISA KEV) and the E:P metric indicates only Proof-of-Concept maturity.