peter bassill · operator
$ cve CVE-2013-1603 JSON

CVE-2013-1603 EXPLOIT

5.3
MEDIUM · CVSS 3.1 · EPSS 16.1% (pctl 97)

Patch early

A public exploit exists.

Description

An Authentication vulnerability exists in D-LINK WCS-1100 1.02, TESCO DCS-2121 1.05_TESCO, TESCO DCS-2102 1.05_TESCO, DCS-7510 1.00, DCS-7410 1.00, DCS-6410 1.00, DCS-5635 1.01, DCS-5605 1.01, DCS-5230L 1.02, DCS-5230 1.02, DCS-3430 1.02, DCS-3411 1.02, DCS-3410 1.02, DCS-2121 1.06_FR, DCS-2121 1.06, DCS-2121 1.05_RU, DCS-2102 1.06_FR, DCS-2102 1.06, DCS-2102 1.05_RU, DCS-1130L 1.04, DCS-1130 1.04_US, DCS-1130 1.03, DCS-1100L 1.04, DCS-1100 1.04_US, and DCS-1100 1.03 due to hard-coded credentials that serve as a backdoor, which allows remote attackers to access the RTSP video stream.

Scoring

CVSS5.3 (MEDIUM, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS16.13% — more likely to be exploited than 97% of all CVEs
WeaknessCWE-798
On CISA KEVno
Public exploityes
Published2020-01-28
Last modified2026-06-16

Affected (34)

VendorProduct
dlinkdcs-1100
dlinkdcs-1100 firmware
dlinkdcs-1100l
dlinkdcs-1100l firmware
dlinkdcs-1130
dlinkdcs-1130 firmware
dlinkdcs-1130l
dlinkdcs-1130l firmware
dlinkdcs-2102
dlinkdcs-2102 firmware
dlinkdcs-2121
dlinkdcs-2121 firmware
dlinkdcs-3410
dlinkdcs-3410 firmware
dlinkdcs-3411
dlinkdcs-3411 firmware
dlinkdcs-3430
dlinkdcs-3430 firmware
dlinkdcs-5230
dlinkdcs-5230 firmware
dlinkdcs-5230l
dlinkdcs-5230l firmware
dlinkdcs-5605
dlinkdcs-5605 firmware
dlinkdcs-5635
dlinkdcs-5635 firmware
dlinkdcs-6410
dlinkdcs-6410 firmware
dlinkdcs-7410
dlinkdcs-7410 firmware
dlinkdcs-7510
dlinkdcs-7510 firmware
dlinkwcs-1100
dlinkwcs-1100 firmware

Public exploits

SourceTitleDate
exploit-dbD-Link IP Cameras - Multiple Vulnerabilities2013-05-01

References

→ the Explorer  ·  watch your stack  ·  NVD