What is the severity of CVE-2018-7698?

CVE-2018-7698 is considered a high severity vulnerability due to the unencrypted transmission of sensitive credentials.

How do I fix CVE-2018-7698?

To mitigate CVE-2018-7698, users should update the D-Link mydlink+ app to the latest version and avoid using outdated versions of connected devices.

What devices are affected by CVE-2018-7698?

CVE-2018-7698 primarily affects D-Link DCS-933L and DCS-934L camera devices when used with the mydlink+ app version 3.8.5.

What information is leaked due to CVE-2018-7698?

CVE-2018-7698 allows attackers to intercept and obtain the unencrypted usernames and passwords of users connected to vulnerable D-Link cameras.

Is CVE-2018-7698 exploitable remotely?

Yes, CVE-2018-7698 can be exploited remotely by attackers who can intercept the traffic between the mydlink+ app and the vulnerable camera.

Vulnerability/
CVE-2018-7698

high

8.1

CWE

522

5/3/2018

5/8/2024

CVE-2018-7698

First published: Mon Mar 05 2018(Updated: )

An issue was discovered in D-Link mydlink+ 3.8.5 build 259 for DCS-933L 1.05.04 and DCS-934L 1.05.04 devices. The mydlink+ app sends the username and password for connected D-Link cameras (such as DCS-933L and DCS-934L) unencrypted from the app to the camera, allowing attackers to obtain these credentials and gain control of the camera including the ability to view the camera's stream and make changes without the user's knowledge.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
D-link Mydlink\+	=3.8.5

Never miss a vulnerability like this again

Reference Links

https://blog.nickleghorn.com/2019/06/16/d-link-security-cameras-using-mydlink-app-leak-passwords/

Frequently Asked Questions

What is the severity of CVE-2018-7698?
CVE-2018-7698 is considered a high severity vulnerability due to the unencrypted transmission of sensitive credentials.
How do I fix CVE-2018-7698?
To mitigate CVE-2018-7698, users should update the D-Link mydlink+ app to the latest version and avoid using outdated versions of connected devices.
What devices are affected by CVE-2018-7698?
CVE-2018-7698 primarily affects D-Link DCS-933L and DCS-934L camera devices when used with the mydlink+ app version 3.8.5.
What information is leaked due to CVE-2018-7698?
CVE-2018-7698 allows attackers to intercept and obtain the unencrypted usernames and passwords of users connected to vulnerable D-Link cameras.
Is CVE-2018-7698 exploitable remotely?
Yes, CVE-2018-7698 can be exploited remotely by attackers who can intercept the traffic between the mydlink+ app and the vulnerable camera.

collector/nvd-index
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/weakness
agent/severity
agent/references
agent/author
agent/tags
agent/first-publish-date
agent/description
agent/event
agent/source
vendor/d-link
canonical/d-link mydlink\+
version/d-link mydlink\+/3.8.5

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2018-7698?
CVE-2018-7698 is considered a high severity vulnerability due to the unencrypted transmission of sensitive credentials.
How do I fix CVE-2018-7698?
To mitigate CVE-2018-7698, users should update the D-Link mydlink+ app to the latest version and avoid using outdated versions of connected devices.
What devices are affected by CVE-2018-7698?
CVE-2018-7698 primarily affects D-Link DCS-933L and DCS-934L camera devices when used with the mydlink+ app version 3.8.5.
What information is leaked due to CVE-2018-7698?
CVE-2018-7698 allows attackers to intercept and obtain the unencrypted usernames and passwords of users connected to vulnerable D-Link cameras.
Is CVE-2018-7698 exploitable remotely?
Yes, CVE-2018-7698 can be exploited remotely by attackers who can intercept the traffic between the mydlink+ app and the vulnerable camera.