CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
D-Link DCS-2530L and DCS-2670L IP Cameras Unauthenticated Administrator Password Disclosure (CVE-2020-25078) Technical Advisory
[Affected Scope] D-Link DCS-2530L (prior to 1.06.01 Hotfix) and DCS-2670L (through 2.02) IP camera devices.
[Impact] Unauthenticated remote attackers can retrieve administrator credentials in plaintext by directly accessing a vulnerable configuration endpoint, leading to complete device takeover.
[Mitigation] Apply the official firmware hotfix immediately, restrict access to the web management interface, and isolate the devices from the public internet.
NETGEAR Routers Administrator Password Disclosure Vulnerability (CVE-2017-5521)
[Affected Scope] Multiple NETGEAR router models including R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000
[Impact] Unauthenticated remote attackers (if remote management is enabled) or local attackers on LAN/WLAN can retrieve the plaintext administrator password
[Mitigation] Apply the latest official firmware updates immediately, or enable the 'Password Recovery' feature and disable remote management as a temporary workaround