First published: Tue Jan 28 2020(Updated: )
An Authentication vulnerability exists in D-LINK WCS-1100 1.02, TESCO DCS-2121 1.05_TESCO, TESCO DCS-2102 1.05_TESCO, DCS-7510 1.00, DCS-7410 1.00, DCS-6410 1.00, DCS-5635 1.01, DCS-5605 1.01, DCS-5230L 1.02, DCS-5230 1.02, DCS-3430 1.02, DCS-3411 1.02, DCS-3410 1.02, DCS-2121 1.06_FR, DCS-2121 1.06, DCS-2121 1.05_RU, DCS-2102 1.06_FR, DCS-2102 1.06, DCS-2102 1.05_RU, DCS-1130L 1.04, DCS-1130 1.04_US, DCS-1130 1.03, DCS-1100L 1.04, DCS-1100 1.04_US, and DCS-1100 1.03 due to hard-coded credentials that serve as a backdoor, which allows remote attackers to access the RTSP video stream.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Dlink Dcs-3411 Firmware | =1.02 | |
Dlink Dcs-3411 | ||
Dlink Dcs-3430 Firmware | =1.02 | |
Dlink Dcs-3430 | ||
Dlink Dcs-5605 Firmware | =1.01 | |
Dlink Dcs-5605 | ||
Dlink Dcs-5635 Firmware | =1.01 | |
Dlink Dcs-5635 | ||
Dlink Dcs-1100l Firmware | =1.04 | |
Dlink Dcs-1100l | ||
Dlink Dcs-1130l Firmware | =1.04 | |
Dlink Dcs-1130l | ||
Dlink Dcs-1100 Firmware | =1.03 | |
Dlink Dcs-1100 Firmware | =1.04 | |
Dlink Dcs-1100 | ||
Dlink Dcs-1130 Firmware | =1.03 | |
Dlink Dcs-1130 Firmware | =1.04 | |
Dlink Dcs-1130 | ||
Dlink Dcs-2102 Firmware | =1.05 | |
Dlink Dcs-2102 Firmware | =1.06 | |
Dlink Dcs-2102 | ||
Dlink Dcs-2121 Firmware | =1.05 | |
Dlink Dcs-2121 Firmware | =1.06 | |
Dlink Dcs-2121 | ||
Dlink Dcs-3410 Firmware | =1.02 | |
Dlink Dcs-3410 | ||
Dlink Dcs-5230 Firmware | =1.02 | |
Dlink Dcs-5230 | ||
Dlink Dcs-5230l Firmware | =1.02 | |
Dlink Dcs-5230l | ||
Dlink Dcs-6410 Firmware | =1.00 | |
Dlink Dcs-6410 | ||
Dlink Dcs-7410 Firmware | =1.00 | |
Dlink Dcs-7410 | ||
Dlink Dcs-7510 Firmware | =1.00 | |
Dlink Dcs-7510 | ||
Dlink Wcs-1100 Firmware | =1.00 | |
Dlink Wcs-1100 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2013-1603 is medium with a severity value of 5.3.
The affected software versions for CVE-2013-1603 are D-LINK WCS-1100 1.02, TESCO DCS-2121 1.05_TESCO, TESCO DCS-2102 1.05_TESCO, DCS-7510 1.00, DCS-7410 1.00, DCS-6410 1.00, DCS-5635 1.01, DCS-5605 1.01, DCS-5230L 1.02, DCS-5230 1.02, DCS-3430 1.02, DCS-3411 1.02, DCS-3410 1.02, DCS-2121 1.06_FR.
To fix CVE-2013-1603, it is recommended to apply the latest firmware update provided by D-LINK.
More information about CVE-2013-1603 can be found on the following websites: [SecurityFocus](http://www.securityfocus.com/bid/59571), [IBM X-Force](https://exchange.xforce.ibmcloud.com/vulnerabilities/83940), [Packet Storm Security](https://packetstormsecurity.com/files/cve/CVE-2013-1603).
The CWE ID of CVE-2013-1603 is 798.