NetSight
IP …
high7.5Public exploit code

CVE-2013-1602

An Information Disclosure vulnerability exists due to insufficient validation of authentication cookies for the RTSP session in D-Link DCS-5635 1.01, DCS-1100L…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

An Information Disclosure vulnerability exists due to insufficient validation of authentication cookies for the RTSP session in D-Link DCS-5635 1.01, DCS-1100L 1.04, DCS-1130L 1.04, DCS-1100 1.03/1.04_US, DCS-1130 1.03/1.04_US , DCS-2102 1.05_RU/1.06/1.06_FR/1.05_TESCO, DCS-2121 1.05_RU/1.06/1.06_FR/1.05_TESCO, DCS-3410 1.02, DCS-5230 1.02, DCS-5230L 1.02, DCS-6410 1.0, DCS-7410 1.0, DCS-7510 1.0, and WCS-1100 1.02, which could let a malicious user obtain unauthorized access to video streams.

Affected products

VendorProductAffected versions
DlinkDcs-3411 Firmware
Version 1.02
DlinkDcs-3430 Firmware
Version 1.02
DlinkDcs-5605 Firmware
Version 1.01
DlinkDcs-5635 Firmware
Version 1.01
DlinkDcs-1100l Firmware
Version 1.04
DlinkDcs-1130l Firmware
Version 1.04
DlinkDcs-1100 Firmware
Versions 1.03, 1.04
DlinkDcs-1130 Firmware
Versions 1.03, 1.04
DlinkDcs-2102 Firmware
Versions 1.05, 1.06
DlinkDcs-2121 Firmware
Versions 1.05, 1.06
DlinkDcs-3410 Firmware
Version 1.02
DlinkDcs-5230 Firmware
Version 1.02

Weakness classification

CWE-200

References