PT-2012-5165 · D Link · D-Link Dcs-932L

Doylej.Ia · Publicado 2012-12-24 · Atualizado 2023-04-26 · CVE-2012-4046

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:A/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions D-Link DCS-932L camera version 1.02

Description The issue allows remote attackers to discover the password via a UDP broadcast packet. This can be demonstrated by running the D-Link Setup Wizard and reading the paramR["P"] value.

Recommendations For D-Link DCS-932L camera version 1.02, consider changing the password and restricting access to the device until a patch is available. As a temporary workaround, avoid using the D-Link Setup Wizard to prevent potential exploitation.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2012-4046

Produtos afetados

D-Link Dcs-932L

Referências · 3

• http://fishnetsecurity.com/6labs/blog/password-disclosure-d-link-surveillance-cameras-cve-2012-4046 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-4046 · Nota de Segurança
• http://seclists.org/bugtraq/2012/Dec/98 · Nota