CVE-2013-1603

An Authentication vulnerability exists in D-LINK WCS-1100 1.02, TESCO DCS-2121 1.05_TESCO, TESCO DCS-2102 1.05_TESCO, DCS-7510 1.00, DCS-7410 1.00, DCS-6410 1.00, DCS-5635 1.01, DCS-5605 1.01, DCS-5230L 1.02, DCS-5230 1.02, DCS-3430 1.02, DCS-3411 1.02, DCS-3410 1.02, DCS-2121 1.06_FR, DCS-2121 1.06, DCS-2121 1.05_RU, DCS-2102 1.06_FR, DCS-2102 1.06, DCS-2102 1.05_RU, DCS-1130L 1.04, DCS-1130 1.04_US, DCS-1130 1.03, DCS-1100L 1.04, DCS-1100 1.04_US, and DCS-1100 1.03 due to hard-coded credentials that serve as a backdoor, which allows remote attackers to access the RTSP video stream.
References
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dlink:dcs-3411_firmware:1.02:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dcs-3411:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:dlink:dcs-3430_firmware:1.02:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dcs-3430:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:dlink:dcs-5605_firmware:1.01:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dcs-5605:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:dlink:dcs-5635_firmware:1.01:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dcs-5635:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:dlink:dcs-1100l_firmware:1.04:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dcs-1100l:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:dlink:dcs-1130l_firmware:1.04:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dcs-1130l:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
OR cpe:2.3:o:dlink:dcs-1100_firmware:1.03:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dcs-1100_firmware:1.04:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dcs-1100:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
OR cpe:2.3:o:dlink:dcs-1130_firmware:1.03:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dcs-1130_firmware:1.04:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dcs-1130:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
OR cpe:2.3:o:dlink:dcs-2102_firmware:1.05:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dcs-2102_firmware:1.06:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dcs-2102:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
OR cpe:2.3:o:dlink:dcs-2121_firmware:1.05:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dcs-2121_firmware:1.06:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dcs-2121:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:dlink:dcs-3410_firmware:1.02:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dcs-3410:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:dlink:dcs-5230_firmware:1.02:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dcs-5230:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:dlink:dcs-5230l_firmware:1.02:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dcs-5230l:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:dlink:dcs-6410_firmware:1.00:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dcs-6410:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:dlink:dcs-7410_firmware:1.00:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dcs-7410:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:dlink:dcs-7510_firmware:1.00:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dcs-7510:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:dlink:wcs-1100_firmware:1.00:*:*:*:*:*:*:*
cpe:2.3:h:dlink:wcs-1100:-:*:*:*:*:*:*:*

History

26 Apr 2021, 16:35

Type Values Removed Values Added
CPE cpe:2.3:o:dlink:wcs-1100_firmware:1.02:*:*:*:*:*:*:* cpe:2.3:o:dlink:wcs-1100_firmware:1.00:*:*:*:*:*:*:*

Information

Published : 2020-01-28 22:15

Updated : 2023-12-10 13:13


NVD link : CVE-2013-1603

Mitre link : CVE-2013-1603

CVE.ORG link : CVE-2013-1603


JSON object : View

Products Affected

dlink

  • dcs-1100l
  • dcs-5230
  • dcs-2102_firmware
  • dcs-1130_firmware
  • dcs-2121_firmware
  • dcs-5635_firmware
  • dcs-5635
  • dcs-1130l
  • dcs-3411
  • dcs-3410
  • dcs-1100l_firmware
  • dcs-1130l_firmware
  • dcs-3430
  • dcs-3430_firmware
  • dcs-5230l
  • dcs-1100_firmware
  • dcs-7410
  • wcs-1100
  • dcs-7510
  • dcs-2102
  • dcs-5605
  • dcs-5230_firmware
  • dcs-7510_firmware
  • dcs-5230l_firmware
  • dcs-5605_firmware
  • dcs-7410_firmware
  • wcs-1100_firmware
  • dcs-6410_firmware
  • dcs-1130
  • dcs-2121
  • dcs-1100
  • dcs-3410_firmware
  • dcs-6410
  • dcs-3411_firmware
CWE
CWE-798

Use of Hard-coded Credentials