peter bassill · operator
$ cve CVE-2013-1599 JSON

CVE-2013-1599 EXPLOIT

9.8
CRITICAL · CVSS 3.1 · EPSS 40.4% (pctl 99)

Patch early

A public exploit exists.

Description

A Command Injection vulnerability exists in the /var/www/cgi-bin/rtpd.cgi script in D-Link IP Cameras DCS-3411/3430 firmware 1.02, DCS-5605/5635 1.01, DCS-1100L/1130L 1.04, DCS-1100/1130 1.03, DCS-1100/1130 1.04_US, DCS-2102/2121 1.05_RU, DCS-3410 1.02, DCS-5230 1.02, DCS-5230L 1.02, DCS-6410 1.00, DCS-7410 1.00, DCS-7510 1.00, and WCS-1100 1.02, which could let a remote malicious user execute arbitrary commands through the camera’s web interface.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS40.35% — more likely to be exploited than 99% of all CVEs
WeaknessCWE-78
On CISA KEVno
Public exploityes
Published2020-01-28
Last modified2026-06-16

Affected (34)

VendorProduct
dlinkdcs-1100
dlinkdcs-1100 firmware
dlinkdcs-1100l
dlinkdcs-1100l firmware
dlinkdcs-1130
dlinkdcs-1130 firmware
dlinkdcs-1130l
dlinkdcs-1130l firmware
dlinkdcs-2102
dlinkdcs-2102 firmware
dlinkdcs-2121
dlinkdcs-2121 firmware
dlinkdcs-3410
dlinkdcs-3410 firmware
dlinkdcs-3411
dlinkdcs-3411 firmware
dlinkdcs-3430
dlinkdcs-3430 firmware
dlinkdcs-5230
dlinkdcs-5230 firmware
dlinkdcs-5230l
dlinkdcs-5230l firmware
dlinkdcs-5605
dlinkdcs-5605 firmware
dlinkdcs-5635
dlinkdcs-5635 firmware
dlinkdcs-6410
dlinkdcs-6410 firmware
dlinkdcs-7410
dlinkdcs-7410 firmware
dlinkdcs-7510
dlinkdcs-7510 firmware
dlinkwcs-1100
dlinkwcs-1100 firmware

Public exploits

SourceTitleDate
exploit-dbD-Link IP Cameras - Multiple Vulnerabilities2013-05-01

References

→ the Explorer  ·  watch your stack  ·  NVD