CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
D-Link DCS-2530L and DCS-2670L IP Cameras Unauthenticated Administrator Password Disclosure (CVE-2020-25078) Technical Advisory
[Affected Scope] D-Link DCS-2530L (prior to 1.06.01 Hotfix) and DCS-2670L (through 2.02) IP camera devices.
[Impact] Unauthenticated remote attackers can retrieve administrator credentials in plaintext by directly accessing a vulnerable configuration endpoint, leading to complete device takeover.
[Mitigation] Apply the official firmware hotfix immediately, restrict access to the web management interface, and isolate the devices from the public internet.
D-Link DCS-930L IP Camera OS Command Injection and Remote Code Execution (RCE) Vulnerability (CVE-2016-11021) Analysis and Mitigation Guide
[Affected Scope] D-Link DCS-930L network camera devices running firmware versions prior to 2.12.
[Impact] An authenticated remote attacker with administrative privileges can execute arbitrary OS commands via the 'SystemCommand' parameter in the 'setSystemCommand' API, leading to complete device compromise.
[Mitigation] Immediately upgrade the device firmware to version 2.12 or higher, and restrict external access to the camera's management interface.