Dcs 930l Firmware
Monthly
Remote command injection in D-Link DCS-930L firmware version 1.15.04 allows authenticated attackers to execute arbitrary system commands via the AdminID parameter of the /setSystemAdmin endpoint. Exploit code is publicly available, but the device is end-of-life and unsupported, so no official patch is expected. The vulnerability is not listed in CISA's Known Exploited Vulnerabilities catalog.
The D-Link DCS series of Wi-Fi cameras contains a stack-based buffer overflow in alphapd, the camera's web server. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
D-Link DCS series Wi-Fi cameras expose sensitive information regarding the device configuration. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
D-Link DCS cameras have a weak/insecure CrossDomain.XML file that allows sites hosting malicious Flash objects to access and/or change the device's settings via a CSRF attack. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Remote command injection in D-Link DCS-930L firmware version 1.15.04 allows authenticated attackers to execute arbitrary system commands via the AdminID parameter of the /setSystemAdmin endpoint. Exploit code is publicly available, but the device is end-of-life and unsupported, so no official patch is expected. The vulnerability is not listed in CISA's Known Exploited Vulnerabilities catalog.
The D-Link DCS series of Wi-Fi cameras contains a stack-based buffer overflow in alphapd, the camera's web server. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
D-Link DCS series Wi-Fi cameras expose sensitive information regarding the device configuration. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
D-Link DCS cameras have a weak/insecure CrossDomain.XML file that allows sites hosting malicious Flash objects to access and/or change the device's settings via a CSRF attack. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.