CVE-2013-1599

Katalog CVE

CVSS 9.8 · Critical EPSS 40,4%

Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada dlink dcs-3411 firmware, dlink dcs-3430 firmware +15 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

A Command Injection vulnerability exists in the /var/www/cgi-bin/rtpd.cgi script in D-Link IP Cameras DCS-3411/3430 firmware 1.02, DCS-5605/5635 1.01, DCS-1100L/1130L 1.04, DCS-1100/1130 1.03, DCS-1100/1130 1.04_US, DCS-2102/2121 1.05_RU, DCS-3410 1.02, DCS-5230 1.02, DCS-5230L 1.02, DCS-6410 1.00, DCS-7410 1.00, DCS-7510 1.00, and WCS-1100 1.02, which could let a remote malicious user execute arbitrary commands through the camera’s web interface.

Rincian

Terbit di NVD

28 Januari 2020

Terakhir diubah

16 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

EPSS (30 hari)

40,4% peluang dieksploitasi; lebih tinggi dari 98,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.exploit-db.com/exploits/25138 exploit · advisory pihak ketiga · vdb entry
• http://www.securityfocus.com/bid/59564 advisory pihak ketiga · vdb entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/83941 advisory pihak ketiga · vdb entry
• https://packetstormsecurity.com/files/cve/CVE-2013-1599 advisory pihak ketiga · vdb entry
• https://seclists.org/fulldisclosure/2013/Apr/253 exploit · mailing list · advisory pihak ketiga
• https://www.coresecurity.com/advisories/d-link-ip-cameras-multiple-vulnerabilities exploit · advisory pihak ketiga