PT-2012-5165 · D Link · D-Link Dcs-932L

Doylej.Ia · Published 2012-12-24 · Updated 2023-04-26 · CVE-2012-4046

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:A/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions D-Link DCS-932L camera version 1.02

Description The issue allows remote attackers to discover the password via a UDP broadcast packet. This can be demonstrated by running the D-Link Setup Wizard and reading the paramR["P"] value.

Recommendations For D-Link DCS-932L camera version 1.02, consider changing the password and restricting access to the device until a patch is available. As a temporary workaround, avoid using the D-Link Setup Wizard to prevent potential exploitation.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2012-4046

Affected Products

D-Link Dcs-932L

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-4046 · Security Note
• http://fishnetsecurity.com/6labs/blog/password-disclosure-d-link-surveillance-cameras-cve-2012-4046 · Note
• http://seclists.org/bugtraq/2012/Dec/98 · Note