CVE-2013-1603
An Authentication vulnerability exists in D-LINK WCS-1100 1.02, TESCO DCS-2121 1.05_TESCO, TESCO DCS-2102 1.05_TESCO, DCS-7510 1.00, DCS-7410 1.00, DCS-6410 1.00, DCS-5635 1.01, DCS-5605 1.01, DCS-5230L 1.02, DCS-5230 1.02, DCS-3430 1.02, DCS-3411 1.02, DCS-3410 1.02, DCS-2121 1.06_FR, DCS-2121 1.06, DCS-2121 1.05_RU, DCS-2102 1.06_FR, DCS-2102 1.06, DCS-2102 1.05_RU, DCS-1130L 1.04, DCS-1130 1.04_US, DCS-1130 1.03, DCS-1100L 1.04, DCS-1100 1.04_US, and DCS-1100 1.03 due to hard-coded credentials that serve as a backdoor, which allows remote attackers to access the RTSP video stream.
- Score
- CVSS 3.1 5.3 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2020-01-28
- Last modified
- 2024-08-06
- Weaknesses
- CWE-798
Affected products
- Dcs-1100 Firmware (Dlink)
- Dcs-1100l Firmware (Dlink)
- Dcs-1130 Firmware (Dlink)
- Dcs-1130l Firmware (Dlink)
- Dcs-2102 Firmware (Dlink)
- Dcs-2121 Firmware (Dlink)
- Dcs-3410 Firmware (Dlink)
- Dcs-3411 Firmware (Dlink)
- Dcs-3430 Firmware (Dlink)
- Dcs-5230 Firmware (Dlink)
- Dcs-5230l Firmware (Dlink)
- Dcs-5605 Firmware (Dlink)
- Dcs-5635 Firmware (Dlink)
- Dcs-6410 Firmware (Dlink)
- Dcs-7410 Firmware (Dlink)
- Dcs-7510 Firmware (Dlink)
- Wcs-1100 Firmware (Dlink)
References
- http://www.securityfocus.com/bid/59571
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83940
- https://packetstormsecurity.com/files/cve/CVE-2013-1603
- https://vuldb.com/?id.8575
- https://www.coresecurity.com/advisories/d-link-ip-cameras-multiple-vulnerabilities