Dcs 1100 Firmware
Vendor:
First CVE: Jul 2, 2019 · Active for 7 years
12
Total CVEs
More Total CVEs than 91% of tracked products
6.0
Avg CVEs / Year
Higher CVE frequency than 91% of tracked products
8.2
Avg CVSS
Higher Avg CVSS than 74% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Dcs 1100 Firmware over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 2, 2019
7 years ago
Most Recent CVE
Jan 28, 2020
2,373 days ago
CVE Severity & Scoring
Dcs 1100 Firmware12 CVEs
17%
58%
25%
All CVEs353,240 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local1 (8.3%)
Network7 (58.3%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network4 (33.3%)
Attack Complexity
Low12 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None12 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low1 (8.3%)
High0 (0.0%)
None11 (91.7%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (12 CVEs).
12 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2013-1599CRITICAL A Command Injection vulnerability exists in the /var/www/cgi-bin/rtpd.cgi script in D-Link IP Cameras DCS-3411/3430 firmware 1.02, DCS-5605/5635 1.01, DCS-1100L/1130L 1.04, DCS-110 | Jan 28, 2020 | 9.8 | 57 | NO | YES |
CVE-2013-1602HIGH An Information Disclosure vulnerability exists due to insufficient validation of authentication cookies for the RTSP session in D-Link DCS-5635 1.01, DCS-1100L 1.04, DCS-1130L 1.04 | Jan 28, 2020 | 7.5 | 35 | NO | YES |
CVE-2017-8416HIGH An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device runs a custom daemon on UDP port 5978 which is called "dldps2121" and listens for broadcast packets sent | Jul 2, 2019 | 8.8 | 32 | NO | NO |
CVE-2017-8410CRITICAL An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The binary rtspd in /sbin folder of the device handles all the rtsp connections received by the device. It seems th | Jul 2, 2019 | 9.8 | 32 | NO | NO |
CVE-2017-8415CRITICAL An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device has a custom telnet daemon as a part of the busybox and retrieves the password from the shadow file usin | Jul 2, 2019 | 9.8 | 31 | NO | NO |
CVE-2017-8413HIGH An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device runs a custom daemon on UDP port 5978 which is called "dldps2121" and listens for broadcast packets sent | Jul 2, 2019 | 8.8 | 31 | NO | NO |
CVE-2013-1603MEDIUM An Authentication vulnerability exists in D-LINK WCS-1100 1.02, TESCO DCS-2121 1.05_TESCO, TESCO DCS-2102 1.05_TESCO, DCS-7510 1.00, DCS-7410 1.00, DCS-6410 1.00, DCS-5635 1.01, DC | Jan 28, 2020 | 5.3 | 30 | NO | YES |
CVE-2017-8417HIGH An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device requires that a user logging into the device provide a username and password. However, the device allows | Jul 2, 2019 | 8.8 | 29 | NO | NO |
CVE-2013-1601MEDIUM An Information Disclosure vulnerability exists due to a failure to restrict access on the lums.cgi script when processing a live video stream in D-LINK An Information Disclosure vu | Jan 28, 2020 | 5.3 | 28 | NO | YES |
CVE-2017-8412HIGH An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device has a custom binary called mp4ts under the /var/www/video folder. It seems that this binary dumps the HT | Jul 2, 2019 | 8.8 | 28 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (12 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
4 CVEs
33.3% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (12 CVEs).
Media Mentions
Signals from CVEs in this product scope (12 CVEs).
Top CNAs Publishing CVEs For Dcs 1100 Firmware
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 1.04 | 4 | 7.0 | 21.1% | 0 | 4 |
| 1.03 | 4 | 7.0 | 21.1% | 0 | 4 |