PT-2011-1900 · D Link · D-Link Dcs-2121

Newsoft · Publicado 2011-10-16 · Atualizado 2012-05-14 · CVE-2010-4965

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DCS-2121 camera with firmware 1.04

Description The issue concerns a hardcoded password in the /etc/rc.d/rc.local file, which sets the root account password to admin. This makes it easier for remote attackers to gain shell access, especially if a telnetd server is running.

Recommendations For D-Link DCS-2121 camera with firmware 1.04, consider changing the hardcoded password of admin for the root account to a stronger, unique password to prevent unauthorized access. As a temporary workaround, restrict access to the telnetd server to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2010-4965

Produtos afetados

D-Link Dcs-2121

Referências · 2

• 🔥 http://newsoft-tech.blogspot.com/2010/09/d-link-dcs-2121-and-state-of-embedded.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-4965 · Nota de Segurança