Vulnerabilities (CVE)

Filtered by vendor Dlink Subscribe
Filtered by product Dcs-5009
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-17020 1 Dlink 6 Dcs-5009, Dcs-5009 Firmware, Dcs-5010 and 3 more 2024-02-04 6.5 MEDIUM 8.8 HIGH
On D-Link DCS-5009 devices with firmware 1.08.11 and earlier, DCS-5010 devices with firmware 1.14.09 and earlier, and DCS-5020L devices with firmware before 1.15.01, command injection in alphapd (binary responsible for running the camera's web server) allows remote authenticated attackers to execute code through sanitized /setSystemAdmin user input in the AdminID field being passed directly to a call to system.