CVE-2021-41503

Vendordlink, d-linkProductdcs-932l firmware, dcs-5000l firmwareDiscoveredSep 24, 2021UpdatedNov 21, 2024

DCS-5000L v1.05 and DCS-932L v2.17 and older are affecged by Incorrect Acess Control. The use of the basic authentication for the devices command interface allows attack vectors that may compromise the cameras configuration and allow malicious users on the LAN to access the device. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

View graph Watch Export

CVSS v3.1

8 HIGH

EPSS

0.45%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

CVSS v3.1 Detail

Attack VectorADJACENT

Attack ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

ScopeUNCHANGED

ConfidentialityHIGH

IntegrityHIGH

AvailabilityHIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Connections

3 relationships

CWE-287

source

Timeline

disclosure → media coverage

Sep 24, 2021

Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024