peter bassill · operator
$ cve CVE-2013-1602 JSON

CVE-2013-1602 EXPLOIT

7.5
HIGH · CVSS 3.1 · EPSS 15.1% (pctl 97)

Patch early

A public exploit exists.

Description

An Information Disclosure vulnerability exists due to insufficient validation of authentication cookies for the RTSP session in D-Link DCS-5635 1.01, DCS-1100L 1.04, DCS-1130L 1.04, DCS-1100 1.03/1.04_US, DCS-1130 1.03/1.04_US , DCS-2102 1.05_RU/1.06/1.06_FR/1.05_TESCO, DCS-2121 1.05_RU/1.06/1.06_FR/1.05_TESCO, DCS-3410 1.02, DCS-5230 1.02, DCS-5230L 1.02, DCS-6410 1.0, DCS-7410 1.0, DCS-7510 1.0, and WCS-1100 1.02, which could let a malicious user obtain unauthorized access to video streams.

Scoring

CVSS7.5 (HIGH, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS15.08% — more likely to be exploited than 97% of all CVEs
WeaknessCWE-200
On CISA KEVno
Public exploityes
Published2020-01-28
Last modified2026-06-16

Affected (34)

VendorProduct
dlinkdcs-1100
dlinkdcs-1100 firmware
dlinkdcs-1100l
dlinkdcs-1100l firmware
dlinkdcs-1130
dlinkdcs-1130 firmware
dlinkdcs-1130l
dlinkdcs-1130l firmware
dlinkdcs-2102
dlinkdcs-2102 firmware
dlinkdcs-2121
dlinkdcs-2121 firmware
dlinkdcs-3410
dlinkdcs-3410 firmware
dlinkdcs-3411
dlinkdcs-3411 firmware
dlinkdcs-3430
dlinkdcs-3430 firmware
dlinkdcs-5230
dlinkdcs-5230 firmware
dlinkdcs-5230l
dlinkdcs-5230l firmware
dlinkdcs-5605
dlinkdcs-5605 firmware
dlinkdcs-5635
dlinkdcs-5635 firmware
dlinkdcs-6410
dlinkdcs-6410 firmware
dlinkdcs-7410
dlinkdcs-7410 firmware
dlinkdcs-7510
dlinkdcs-7510 firmware
dlinkwcs-1100
dlinkwcs-1100 firmware

Public exploits

SourceTitleDate
exploit-dbD-Link IP Cameras - Multiple Vulnerabilities2013-05-01

References

→ the Explorer  ·  watch your stack  ·  NVD