Dlink

Dcs-5000l Firmware

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8

CVE-2021-41504

  • EPSS 0.16%
  • Published 24.09.2021 20:15:07
  • Last modified 21.11.2024 06:26:20

An Elevated Privileges issue exists in D-Link DCS-5000L v1.05 and DCS-932L v2.17 and older. The use of the digest-authentication for the devices command interface may allow further attack vectors that may compromise the cameras configuration and allo...

8.8

CVE-2017-7852

Exploit
  • EPSS 1%
  • Published 24.04.2017 10:59:00
  • Last modified 20.04.2025 01:37:25

D-Link DCS cameras have a weak/insecure CrossDomain.XML file that allows sites hosting malicious Flash objects to access and/or change the device's settings via a CSRF attack. This is because of the 'allow-access-from domain' child element set to *, ...