** UNSUPPORTED WHEN ASSIGNED ** DCS-5000L v1.05 and DCS-932L v2.17 and older are affecged by Incorrect Acess Control. The use of the basic authentication for the devices command interface allows attack vectors that may compromise the cameras configuration and allow malicious users on the LAN to access the device. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
References
| Link | Resource |
|---|---|
| https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10247 | Vendor Advisory |
| https://www.dlink.com/en/security-bulletin/ | Vendor Advisory |
Configurations
History
26 Apr 2023, 19:27
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:d-link:dcs-5000l:-:*:*:*:*:*:*:* cpe:2.3:h:d-link:dcs-932l:-:*:*:*:*:*:*:* |
cpe:2.3:h:dlink:dcs-932l:-:*:*:*:*:*:*:* cpe:2.3:o:dlink:dcs-932l_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:dlink:dcs-5000l:-:*:*:*:*:*:*:* |
30 Sep 2021, 21:19
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-287 | |
| CPE | cpe:2.3:o:d-link:dcs-5000l_firmware:1.05:*:*:*:*:*:*:* cpe:2.3:h:d-link:dcs-932l:-:*:*:*:*:*:*:* cpe:2.3:h:d-link:dcs-5000l:-:*:*:*:*:*:*:* cpe:2.3:o:d-link:dcs-932l_firmware:*:*:*:*:*:*:*:* |
|
| References | (MISC) https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10247 - Vendor Advisory | |
| References | (MISC) https://www.dlink.com/en/security-bulletin/ - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : 5.2
v3 : 8.0 |
24 Sep 2021, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-09-24 20:15
Updated : 2024-08-04 04:15
NVD link : CVE-2021-41503
Mitre link : CVE-2021-41503
CVE.ORG link : CVE-2021-41503
JSON object : View
Products Affected
dlink
- dcs-5000l
- dcs-932l
- dcs-932l_firmware
d-link
- dcs-5000l_firmware
CWE
CWE-287
Improper Authentication