CVE-2013-1600

MEDIUM

D-Link DCS-2102 and DCS-2121 Firmware - Authentication Bypass via UPnP ASF-MP4 Streaming

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2013-1600.

AI-analyzed exploit summary This advisory from Core Security details multiple vulnerabilities in D-Link IP cameras, including OS command injection (CVE-2013-1599), authentication bypass (CVE-2013-1600), and information leaks (CVE-2013-1601). It provides technical analysis, affected firmware versions, and proof-of-concept examples for exploitation.

Description

An Authentication Bypass vulnerability exists in upnp/asf-mp4.asf when streaming live video in D-Link TESCO DCS-2121 1.05_TESCO, TESCO DCS-2102 1.05_TESCO, DCS-2121 1.06_FR, 1.06, and 1.05_RU, DCS-2102 1.06_FR. 1.06, and 1.05_RU, which could let a malicious user obtain sensitive information.

Exploits (1)

exploitdb WRITEUP

webappshardware

https://www.exploit-db.com/exploits/25138

View Code ZIP pw:eip

This advisory from Core Security details multiple vulnerabilities in D-Link IP cameras, including OS command injection (CVE-2013-1599), authentication bypass (CVE-2013-1600), and information leaks (CVE-2013-1601). It provides technical analysis, affected firmware versions, and proof-of-concept examples for exploitation.

Classification

Writeup 100%

Attack Type

Rce | Auth Bypass | Info Leak

Complexity

Moderate

Reliability

Reliable

Target: D-Link IP Cameras (various models, firmware versions up to v1.06)

No auth needed

Prerequisites: Network access to the vulnerable D-Link IP camera

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter T1068 - Exploitation for Privilege Escalation

devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (5)

Core 5

Core References

Third Party Advisory, VDB Entry x_refsource_misc

http://www.securityfocus.com/bid/59566

Third Party Advisory, VDB Entry x_refsource_misc

https://exchange.xforce.ibmcloud.com/vulnerabilities/83916

Exploit, Third Party Advisory x_refsource_misc

https://www.coresecurity.com/advisories/d-link-ip-cameras-multiple-vulnerabilities

Third Party Advisory, VDB Entry x_refsource_misc

https://packetstormsecurity.com/files/cve/CVE-2013-1600

Permissions Required x_refsource_misc

https://vuldb.com/?id.8572

Scores

CVSS v3 5.3

EPSS 0.7375

EPSS Percentile 98.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-287

Status published

Products (4)

dlink/dcs-2102_firmware 1.05

dlink/dcs-2102_firmware 1.06

dlink/dcs-2121_firmware 1.05

dlink/dcs-2121_firmware 1.06

Published Jan 28, 2020

Tracked Since Feb 18, 2026