Dcs 932l Firmware
Vendor:
First CVE: Dec 24, 2012 · Active for 13 years
14
Total CVEs
More Total CVEs than 92% of tracked products
1.8
Avg CVEs / Year
Higher CVE frequency than 63% of tracked products
8.1
Avg CVSS
Higher Avg CVSS than 73% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Dcs 932l Firmware over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 24, 2012
13 years ago
Most Recent CVE
May 11, 2026
78 days ago
CVE Severity & Scoring
Dcs 932l Firmware14 CVEs
57%
29%
All CVEs353,240 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local0 (0.0%)
Network10 (71.4%)
Unknown1 (7.1%)
Physical0 (0.0%)
Adjacent Network3 (21.4%)
Attack Complexity
Low13 (92.9%)
High0 (0.0%)
Unknown1 (7.1%)
User Interaction
None12 (85.7%)
Unknown1 (7.1%)
Required1 (7.1%)
Privileges Required
Low4 (28.6%)
High0 (0.0%)
None9 (64.3%)
Unknown1 (7.1%)
Top CVEs
Signals from CVEs in this product scope (14 CVEs).
14 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2017-7852HIGH D-Link DCS cameras have a weak/insecure CrossDomain.XML file that allows sites hosting malicious Flash objects to access and/or change the device's settings via a CSRF attack. This | Apr 24, 2017 | 8.8 | 40 | NO | YES |
CVE-2025-5573CRITICAL A vulnerability was found in D-Link DCS-932L 2.18.01. It has been rated as critical. Affected by this issue is the function setSystemWizard/setSystemControl of the file /setSystemW | Jun 4, 2025 | 9.8 | 31 | NO | NO |
CVE-2026-36983HIGH D-Link DCS-932L v2.18.01 is vulnerable to Command Injection in the function sub_42EF14 of the file /bin/alphapd. The manipulation of the argument LightSensorControl leads to comman | May 11, 2026 | 7.3 | 30 | NO | NO |
CVE-2025-4842CRITICAL A vulnerability was found in D-Link DCS-932L 2.18.01. It has been declared as critical. This vulnerability affects the function isUCPCameraNameChanged of the file /sbin/ucp. The ma | May 17, 2025 | 9.8 | 30 | NO | NO |
CVE-2025-5571HIGH A vulnerability was found in D-Link DCS-932L 2.18.01. It has been classified as critical. Affected is the function setSystemAdmin of the file /setSystemAdmin. The manipulation of t | Jun 4, 2025 | 8.8 | 29 | NO | NO |
CVE-2019-10999HIGH The D-Link DCS series of Wi-Fi cameras contains a stack-based buffer overflow in alphapd, the camera's web server. The overflow allows a remotely authenticated attacker to execute | May 6, 2019 | 8.8 | 29 | NO | NO |
CVE-2025-4841CRITICAL A vulnerability was found in D-Link DCS-932L 2.18.01 and classified as critical. Affected by this issue is the function sub_404780 of the file /bin/gpio. The manipulation of the ar | May 17, 2025 | 9.8 | 27 | NO | NO |
CVE-2025-4843CRITICAL A vulnerability was found in D-Link DCS-932L 2.18.01. It has been classified as critical. This affects the function SubUPnPCSInit of the file /sbin/udev. The manipulation of the ar | May 18, 2025 | 9.8 | 26 | NO | NO |
CVE-2021-41504HIGH An Elevated Privileges issue exists in D-Link DCS-5000L v1.05 and DCS-932L v2.17 and older. The use of the digest-authentication for the devices command interface may allow further | Sep 24, 2021 | 8.0 | 25 | NO | NO |
CVE-2025-5572HIGH A vulnerability was found in D-Link DCS-932L 2.18.01. It has been declared as critical. Affected by this vulnerability is the function setSystemEmail of the file /setSystemEmail. T | Jun 4, 2025 | 7.5 | 24 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (14 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
7.1% of CVEs· 86th percentile
Social Chatter
Signals from CVEs in this product scope (14 CVEs).
Media Mentions
Signals from CVEs in this product scope (14 CVEs).
Top CNAs Publishing CVEs For Dcs 932l Firmware
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2.18.01 | 8 | 8.7 | 3.6% | 0 | 0 |
| 1.02 | 1 | 3.3 | 0.8% | 0 | 0 |