CVE-2013-1600

MEDIUM

Dlink Dcs-2102 Firmware - Authentication Bypass

Title source: rule

Description

An Authentication Bypass vulnerability exists in upnp/asf-mp4.asf when streaming live video in D-Link TESCO DCS-2121 1.05_TESCO, TESCO DCS-2102 1.05_TESCO, DCS-2121 1.06_FR, 1.06, and 1.05_RU, DCS-2102 1.06_FR. 1.06, and 1.05_RU, which could let a malicious user obtain sensitive information.

Exploits (1)

exploitdb WRITEUP

webappshardware

https://www.exploit-db.com/exploits/25138

View Code ZIP pw:eip

References (5)

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/59566

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/83916

[Third Party Advisory, VDB Entry] https://packetstormsecurity.com/files/cve/CVE-2013-1600

[Permissions Required] https://vuldb.com/?id.8572

[Exploit, Third Party Advisory] https://www.coresecurity.com/advisories/d-link-ip-cameras-multiple-vulnerabilities

Scores

CVSS v3 5.3

EPSS 0.7292

EPSS Percentile 98.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-287

Status published

Products (4)

dlink/dcs-2102_firmware 1.05

dlink/dcs-2102_firmware 1.06

dlink/dcs-2121_firmware 1.05

dlink/dcs-2121_firmware 1.06

Published Jan 28, 2020

Tracked Since Feb 18, 2026