RSS   Vulnerabilities for 'Dcs-2330l firmware'   RSS

2017-04-24
 
CVE-2017-7852

 

 
D-Link DCS cameras have a weak/insecure CrossDomain.XML file that allows sites hosting malicious Flash objects to access and/or change the device's settings via a CSRF attack. This is because of the 'allow-access-from domain' child element set to *, thus accepting requests from any domain. If a victim logged into the camera's web console visits a malicious site hosting a malicious Flash file from another Browser tab, the malicious Flash file then can send requests to the victim's DCS series Camera without knowing the credentials. An attacker can host a malicious Flash file that can retrieve Live Feeds or information from the victim's DCS series Camera, add new admin users, or make other changes to the device. Known affected devices are DCS-933L with firmware before 1.13.05, DCS-5030L, DCS-5020L, DCS-2530L, DCS-2630L, DCS-930L, DCS-932L, and DCS-932LB1.

 

 >>> Vendor: D-link 201 Products
Dl-704
Dwl-1000ap
Dp-303
Di-804
Dwl-900ap+
Di-614+
Di-624
Di-704p
Di-604
Dcs-900 internet camera
Dsl-502t
Dsl-504t
Dsl-562t
Dsl-g604t
Di-524
Di-784
Dwl-g700ap
Dsa-3100 airspot gateway
Dwl-2100ap
Di-604 broadband router
Ebr-2310 ethernet broadband router
Wbr-1310 wireless g router
Wbr-2310 rangebooster g router
Dsl-g624t
Dwl-g132
Dwl-2000ap+
Tftp server
Dph-540
Dph-541
Dir-100
Mpeg4 shm audio control
Dir-400
Dkvm-ip8
Dir-300
Camera stream client activex control
Dcs-5605 ptz ip network camera
Dsl-2730u
Dcs-932l camera
Dcs-932l camera firmware
Di-524up
Di-604+
Di-604s
Di-604up
Di-624s
Dir-120
Tm-g5240
Dsr-1000
Dsr-1000n
Dsr-150
Dsr-150n
Dsr-250
Dsr-500
Dsr-500n
Dsr-1000 firmware
Dsr-1000n firmware
Dsr-150 firmware
Dsr-150n firmware
Dsr-250 firmware
Dsr-250n firmware
Dsr-500 firmware
Dsr-500n firmware
Dsl-2640r
Dsl-2641r
Dap 2253
Dap 2253 firmware
Dir-505l shareport mobile companion
Dir-826l wireless n600 cloud router
Dir-505l shareport mobile companion firmware
Dir-826l wireless n600 cloud router firmware
Dap 1150
Dap 1150 firmware
Dap-1350
Dap-1350 firmware
Dir505 shareport mobile companion
Dsp-w215
Dir505 shareport mobile companion firmware
Dir505l shareport mobile companion firmware
Dsp-w215 firmware
Dir-601
Dir-601 firmware
Dsl-2760u-e1
Dir-645
Dir-645 firmware
Dsl2740u
Dsl2750u
Dcs-2103 hd cube network camera
Dcs-2103 hd cube network camera firmware
Dir-655
Dir-655 firmware
Dir-60
Dir-600 firmware
Dap-1360 firmware
Dsl-2730b firmware
Dcs-931l firmware
Dap-1320 firmware
Dcs-932l
Dcs-932l firmware
Dir-600l
Dir-605l
Dir-619l
See all Products for Vendor D-link


Copyright 2018, cxsecurity.com

 

Back to Top