PT-2019-8628 · D Link · D-Link Dcs-1130+1

Mandar Satam · Publicado 2019-07-02 · Atualizado 2021-04-23 · CVE-2017-8405

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions D-Link DCS-1130 (affected versions not specified) D-Link DCS-1100 (affected versions not specified)

Description An issue was discovered in D-Link devices where the binary rtspd handles all rtsp connections. A flag called Authenticate indicates whether a user should be authenticated before allowing access to the video feed. By default, this flag is set to zero, allowing any attacker with the external IP address of the camera to view the live video feed without authentication. The device requires a valid username and password for the HTTP management interface but does not enforce the same restriction on RTSP URLs by default. There are over 100,000 D-Link devices potentially affected.

Recommendations For D-Link DCS-1130, consider enabling the Authenticate flag to require authentication for RTSP connections. For D-Link DCS-1100, consider enabling the Authenticate flag to require authentication for RTSP connections. As a temporary workaround, consider restricting access to the RTSP URL to minimize the risk of exploitation.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2017-8405

Produtos afetados

D-Link Dcs-1100

D-Link Dcs-1130

Referências · 6

• 🔥 https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf · Exploit
• https://t.me/cibsecurity/5315 · Publicação no Telegram
• http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html · Nota
• https://t.me/cibsecurity/5425 · Publicação no Telegram
• https://seclists.org/bugtraq/2019/Jun/8 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-8405 · Nota de Segurança