PT-2020-7359 · D Link · Dcs-7510+13

Published 2020-01-28 · Updated 2025-09-16 · CVE-2013-1599

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: D-Link IP Cameras DCS-3411/3430 version 1.02 D-Link IP Cameras DCS-5605/5635 version 1.01 D-Link IP Cameras DCS-1100L/1130L version 1.04 D-Link IP Cameras DCS-1100/1130 version 1.03 D-Link IP Cameras DCS-1100/1130 version 1.04 US D-Link IP Cameras DCS-2102/2121 version 1.05 RU D-Link IP Cameras DCS-3410 version 1.02 D-Link IP Cameras DCS-5230 version 1.02 D-Link IP Cameras DCS-5230L version 1.02 D-Link IP Cameras DCS-6410 version 1.00 D-Link IP Cameras DCS-7410 version 1.00 D-Link IP Cameras DCS-7510 version 1.00 D-Link IP Cameras WCS-1100 version 1.02

Description: A Command Injection issue exists in the /var/www/cgi-bin/rtpd.cgi script, which could let a remote malicious user execute arbitrary commands through the camera’s web interface.

Recommendations: For D-Link IP Cameras DCS-3411/3430 version 1.02, consider disabling the /var/www/cgi-bin/rtpd.cgi script until a patch is available. For D-Link IP Cameras DCS-5605/5635 version 1.01, consider disabling the /var/www/cgi-bin/rtpd.cgi script until a patch is available. For D-Link IP Cameras DCS-1100L/1130L version 1.04, consider disabling the /var/www/cgi-bin/rtpd.cgi script until a patch is available. For D-Link IP Cameras DCS-1100/1130 version 1.03, consider disabling the /var/www/cgi-bin/rtpd.cgi script until a patch is available. For D-Link IP Cameras DCS-1100/1130 version 1.04 US, consider disabling the /var/www/cgi-bin/rtpd.cgi script until a patch is available. For D-Link IP Cameras DCS-2102/2121 version 1.05 RU, consider disabling the /var/www/cgi-bin/rtpd.cgi script until a patch is available. For D-Link IP Cameras DCS-3410 version 1.02, consider disabling the /var/www/cgi-bin/rtpd.cgi script until a patch is available. For D-Link IP Cameras DCS-5230 version 1.02, consider disabling the /var/www/cgi-bin/rtpd.cgi script until a patch is available. For D-Link IP Cameras DCS-5230L version 1.02, consider disabling the /var/www/cgi-bin/rtpd.cgi script until a patch is available. For D-Link IP Cameras DCS-6410 version 1.00, consider disabling the /var/www/cgi-bin/rtpd.cgi script until a patch is available. For D-Link IP Cameras DCS-7410 version 1.00, consider disabling the /var/www/cgi-bin/rtpd.cgi script until a patch is available. For D-Link IP Cameras DCS-7510 version 1.00, consider disabling the /var/www/cgi-bin/rtpd.cgi script until a patch is available. For D-Link IP Cameras WCS-1100 version 1.02, consider disabling the /var/www/cgi-bin/rtpd.cgi script until a patch is available.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2013-1599

Affected Products

Dcs-1100L

Dcs-1130

Dcs-2102

Dcs-2121

Dcs-3410

Dcs-3411

Dcs-3430

Dcs-5230

Dcs-5605

Dcs-5635

Dcs-6410

Dcs-7410

Dcs-7510

Wcs-1100

References · 11

• 🔥 https://exploit-db.com/exploits/25138 · Exploit
• 🔥 https://coresecurity.com/advisories/d-link-ip-cameras-multiple-vulnerabilities · Exploit
• 🔥 https://seclists.org/fulldisclosure/2013/Apr/253 · Exploit
• 🔥 http://exploit-db.com/exploits/25138 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-1599 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/83941 · Note
• https://t.me/aptreports/22022 · Telegram Post
• https://t.me/cvenotify/563 · Telegram Post
• https://packetstormsecurity.com/files/cve/CVE-2013-1599 · Note
• http://securityfocus.com/bid/59564 · Note
• https://t.me/aptreports/22058 · Telegram Post