Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device requires that a user logging into the device provide a username and password. However, the device allows D-Link apps on the mobile devices and desktop to communicate with the device without any authentication. As a part of that communication, the device uses custom version of base64 encoding to pass data back and forth between the apps and the device. However, the same form of communication can be initiated by any process including an attacker process on the mobile phone or the desktop and this allows a third party to retrieve the device's password without any authentication by sending just 1 UDP packet with custom base64 encoding. The severity of this attack is enlarged by the fact that there more than 100,000 D-Link devices out there.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
D-Link DCS-1100和D-Link DCS-1130 信任管理问题漏洞
Vulnerability Description
D-Link DCS-1100和D-Link DCS-1130都是中国台湾友讯（D-Link）公司的一款网络摄像机。 D-Link DCS-1100和DCS-1130中存在安全漏洞。本地攻击者可通过发送简单的UDP数据包利用该漏洞访问管理界面，查看所拍摄的图像。
CVSS Information
N/A
Vulnerability Type
N/A