PT-2020-7362 · D Link · Dcs-7510+10

Published 2020-01-28 · Updated 2021-04-26 · CVE-2013-1602

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: D-Link DCS-5635 version 1.01 D-Link DCS-1100L version 1.04 D-Link DCS-1130L version 1.04 D-Link DCS-1100 versions 1.03 through 1.04 US D-Link DCS-1130 versions 1.03 through 1.04 US D-Link DCS-2102 versions 1.05 RU through 1.06 FR D-Link DCS-2121 versions 1.05 RU through 1.06 FR D-Link DCS-3410 version 1.02 D-Link DCS-5230 version 1.02 D-Link DCS-5230L version 1.02 D-Link DCS-6410 version 1.0 D-Link DCS-7410 version 1.0 D-Link DCS-7510 version 1.0 D-Link WCS-1100 version 1.02

Description: An Information Disclosure issue exists due to insufficient validation of authentication cookies for the RTSP session, which could let a malicious user obtain unauthorized access to video streams.

Recommendations: For D-Link DCS-5635 version 1.01, update the firmware to a version that includes the fix for this issue. For D-Link DCS-1100L version 1.04, update the firmware to a version that includes the fix for this issue. For D-Link DCS-1130L version 1.04, update the firmware to a version that includes the fix for this issue. For D-Link DCS-1100 versions 1.03 through 1.04 US, update the firmware to a version that includes the fix for this issue. For D-Link DCS-1130 versions 1.03 through 1.04 US, update the firmware to a version that includes the fix for this issue. For D-Link DCS-2102 versions 1.05 RU through 1.06 FR, update the firmware to a version that includes the fix for this issue. For D-Link DCS-2121 versions 1.05 RU through 1.06 FR, update the firmware to a version that includes the fix for this issue. For D-Link DCS-3410 version 1.02, update the firmware to a version that includes the fix for this issue. For D-Link DCS-5230 version 1.02, update the firmware to a version that includes the fix for this issue. For D-Link DCS-5230L version 1.02, update the firmware to a version that includes the fix for this issue. For D-Link DCS-6410 version 1.0, update the firmware to a version that includes the fix for this issue. For D-Link DCS-7410 version 1.0, update the firmware to a version that includes the fix for this issue. For D-Link DCS-7510 version 1.0, update the firmware to a version that includes the fix for this issue. For D-Link WCS-1100 version 1.02, update the firmware to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2013-1602

Affected Products

Dcs-1100L

Dcs-1130

Dcs-2102

Dcs-2121

Dcs-3410

Dcs-5230

Dcs-5635

Dcs-6410

Dcs-7410

Dcs-7510

Wcs-1100

References · 7

• 🔥 https://exploit-db.com/exploits/25138 · Exploit
• 🔥 https://coresecurity.com/advisories/d-link-ip-cameras-multiple-vulnerabilities · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-1602 · Security Note
• https://packetstormsecurity.com/files/cve/CVE-2013-1602 · Note
• https://t.me/cvenotify/576 · Telegram Post
• http://securityfocus.com/bid/59569 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/83942 · Note