CVE-2013-1603

Katalog CVE

CVSS 5.3 · Medium EPSS 16,1%

Kerentanan Use of Hard-coded Credentials pada dlink dcs-3411 firmware, dlink dcs-3430 firmware +15 lainnya. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

An Authentication vulnerability exists in D-LINK WCS-1100 1.02, TESCO DCS-2121 1.05_TESCO, TESCO DCS-2102 1.05_TESCO, DCS-7510 1.00, DCS-7410 1.00, DCS-6410 1.00, DCS-5635 1.01, DCS-5605 1.01, DCS-5230L 1.02, DCS-5230 1.02, DCS-3430 1.02, DCS-3411 1.02, DCS-3410 1.02, DCS-2121 1.06_FR, DCS-2121 1.06, DCS-2121 1.05_RU, DCS-2102 1.06_FR, DCS-2102 1.06, DCS-2102 1.05_RU, DCS-1130L 1.04, DCS-1130 1.04_US, DCS-1130 1.03, DCS-1100L 1.04, DCS-1100 1.04_US, and DCS-1100 1.03 due to hard-coded credentials that serve as a backdoor, which allows remote attackers to access the RTSP video stream.

Rincian

Terbit di NVD

28 Januari 2020

Terakhir diubah

16 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-798: Use of Hard-coded Credentials

EPSS (30 hari)

16,1% peluang dieksploitasi; lebih tinggi dari 96,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.securityfocus.com/bid/59571 advisory pihak ketiga · vdb entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/83940 advisory pihak ketiga · vdb entry
• https://packetstormsecurity.com/files/cve/CVE-2013-1603 advisory pihak ketiga · vdb entry
• https://www.coresecurity.com/advisories/d-link-ip-cameras-multiple-vulnerabilities exploit · advisory pihak ketiga
• https://vuldb.com/?id.8575 permissions required