NetSight
medium5.0

CVE-2014-9238

D-link IP camera DCS-2103 with firmware 1.0.0 allows remote attackers to obtain the installation path via the file parameter to cgi-bin/sddownload.cgi, as demo…

Impact

D-link IP camera DCS-2103 with firmware 1.0.0 allows remote attackers to obtain the installation path via the file parameter to cgi-bin/sddownload.cgi, as demonstrated by a / (forward slash) character.

Affected products

VendorProductAffected versions
D-LinkDcs-2103 Hd Cube Network Camera Firmware
Version 1.0.0

Weakness classification

References