5.3

CVE-2013-1600

Exploit

An Authentication Bypass vulnerability exists in upnp/asf-mp4.asf when streaming live video in D-Link TESCO DCS-2121 1.05_TESCO, TESCO DCS-2102 1.05_TESCO, DCS-2121 1.06_FR, 1.06, and 1.05_RU, DCS-2102 1.06_FR. 1.06, and 1.05_RU, which could let a malicious user obtain sensitive information.

Data is provided by the National Vulnerability Database (NVD)
Dlink ≫ Dcs-2102 Firmware Version1.05
   Dlink ≫ Dcs-2102 Version-
Dlink ≫ Dcs-2102 Firmware Version1.06
   Dlink ≫ Dcs-2102 Version-
Dlink ≫ Dcs-2121 Firmware Version1.05
   Dlink ≫ Dcs-2121 Version-
Dlink ≫ Dcs-2121 Firmware Version1.06
   Dlink ≫ Dcs-2121 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 72.69% 0.986
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://www.securityfocus.com/bid/59566
Third Party Advisory
VDB Entry
https://vuldb.com/?id.8572
Permissions Required