PT-2019-8628 · D Link · D-Link Dcs-1130+1

Mandar Satam · Published 2019-07-02 · Updated 2021-04-23 · CVE-2017-8405

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions D-Link DCS-1130 (affected versions not specified) D-Link DCS-1100 (affected versions not specified)

Description An issue was discovered in D-Link devices where the binary rtspd handles all rtsp connections. A flag called Authenticate indicates whether a user should be authenticated before allowing access to the video feed. By default, this flag is set to zero, allowing any attacker with the external IP address of the camera to view the live video feed without authentication. The device requires a valid username and password for the HTTP management interface but does not enforce the same restriction on RTSP URLs by default. There are over 100,000 D-Link devices potentially affected.

Recommendations For D-Link DCS-1130, consider enabling the Authenticate flag to require authentication for RTSP connections. For D-Link DCS-1100, consider enabling the Authenticate flag to require authentication for RTSP connections. As a temporary workaround, consider restricting access to the RTSP URL to minimize the risk of exploitation.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2017-8405

Affected Products

D-Link Dcs-1100

D-Link Dcs-1130

References · 6

• 🔥 https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Dlink_DCS_1130_security.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-8405 · Security Note
• https://t.me/cibsecurity/5315 · Telegram Post
• http://packetstormsecurity.com/files/153226/Dlink-DCS-1130-Command-Injection-CSRF-Stack-Overflow.html · Note
• https://t.me/cibsecurity/5425 · Telegram Post
• https://seclists.org/bugtraq/2019/Jun/8 · Note