CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-09-02
D-Link DCS-2530L and DCS-2670L IP Cameras Unauthenticated Administrator Password Disclosure (CVE-2020-25078) Technical Advisory
[Affected Scope] D-Link DCS-2530L (prior to 1.06.01 Hotfix) and DCS-2670L (through 2.02) IP camera devices.
[Impact] Unauthenticated remote attackers can retrieve administrator credentials in plaintext by directly accessing a vulnerable configuration endpoint, leading to complete device takeover.
[Mitigation] Apply the official firmware hotfix immediately, restrict access to the web management interface, and isolate the devices from the public internet.