A Command Injection vulnerability exists in the /var/www/cgi-bin/rtpd.cgi script in…
Priority HIGH 70CWE-78Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-78.
Summary
A Command Injection vulnerability exists in the /var/www/cgi-bin/rtpd.cgi script in D-Link IP Cameras DCS-3411/3430 firmware 1.02, DCS-5605/5635 1.01, DCS-1100L/1130L 1.04, DCS-1100/1130 1.03, DCS-1100/1130 1.04_US, DCS-2102/2121 1.05_RU, DCS-3410 1.02, DCS-5230 1.02, DCS-5230L 1.02, DCS-6410 1.00, DCS-7410 1.00, DCS-7510 1.00, and WCS-1100 1.02, which could let a remote malicious user execute arbitrary commands through the camera’s web interface.
Why it matters now
EPSS 0.40353 98th percentileScored 2026-11-07
Public exploit Yes 3 exploit referencesTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 36
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:dlink:dcs-3411_firmware:1.02:*:*:*:*:*:*:* | 1.02 | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dcs-3411:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dcs-3430_firmware:1.02:*:*:*:*:*:*:* | 1.02 | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dcs-3430:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dcs-5605_firmware:1.01:*:*:*:*:*:*:* | 1.01 | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dcs-5605:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dcs-5635_firmware:1.01:*:*:*:*:*:*:* | 1.01 | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dcs-5635:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dcs-1100l_firmware:1.04:*:*:*:*:*:*:* | 1.04 | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dcs-1100l:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
- cpe:2.3:o:dlink:dcs-3411_firmware:1.02:*:*:*:*:*:*:* Versions 1.02 Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dcs-3411:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dcs-3430_firmware:1.02:*:*:*:*:*:*:* Versions 1.02 Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dcs-3430:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dcs-5605_firmware:1.01:*:*:*:*:*:*:* Versions 1.01 Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dcs-5605:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dcs-5635_firmware:1.01:*:*:*:*:*:*:* Versions 1.01 Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dcs-5635:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dcs-1100l_firmware:1.04:*:*:*:*:*:*:* Versions 1.04 Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dcs-1100l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
Show 26 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:dlink:dcs-1130l_firmware:1.04:*:*:*:*:*:*:* | 1.04 | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dcs-1130l:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dcs-1100_firmware:1.03:*:*:*:*:*:*:* | 1.03 | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dcs-1100_firmware:1.04:*:*:*:*:*:*:* | 1.04 | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dcs-1100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dcs-1130_firmware:1.03:*:*:*:*:*:*:* | 1.03 | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dcs-1130_firmware:1.04:*:*:*:*:*:*:* | 1.04 | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dcs-1130:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dcs-2102_firmware:1.05:*:*:*:*:*:*:* | 1.05 | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dcs-2102:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dcs-2121_firmware:1.05:*:*:*:*:*:*:* | 1.05 | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dcs-2121:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dcs-3410_firmware:1.02:*:*:*:*:*:*:* | 1.02 | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dcs-3410:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dcs-5230_firmware:1.02:*:*:*:*:*:*:* | 1.02 | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dcs-5230:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dcs-5230l_firmware:1.02:*:*:*:*:*:*:* | 1.02 | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dcs-5230l:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dcs-6410_firmware:1.00:*:*:*:*:*:*:* | 1.00 | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dcs-6410:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dcs-7410_firmware:1.00:*:*:*:*:*:*:* | 1.00 | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dcs-7410:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dcs-7510_firmware:1.00:*:*:*:*:*:*:* | 1.00 | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dcs-7510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:wcs-1100_firmware:1.00:*:*:*:*:*:*:* | 1.00 | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:wcs-1100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
- cpe:2.3:o:dlink:dcs-1130l_firmware:1.04:*:*:*:*:*:*:* Versions 1.04 Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dcs-1130l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dcs-1100_firmware:1.03:*:*:*:*:*:*:* Versions 1.03 Vulnerable ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dcs-1100_firmware:1.04:*:*:*:*:*:*:* Versions 1.04 Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dcs-1100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dcs-1130_firmware:1.03:*:*:*:*:*:*:* Versions 1.03 Vulnerable ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dcs-1130_firmware:1.04:*:*:*:*:*:*:* Versions 1.04 Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dcs-1130:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dcs-2102_firmware:1.05:*:*:*:*:*:*:* Versions 1.05 Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dcs-2102:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dcs-2121_firmware:1.05:*:*:*:*:*:*:* Versions 1.05 Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dcs-2121:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dcs-3410_firmware:1.02:*:*:*:*:*:*:* Versions 1.02 Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dcs-3410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dcs-5230_firmware:1.02:*:*:*:*:*:*:* Versions 1.02 Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dcs-5230:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dcs-5230l_firmware:1.02:*:*:*:*:*:*:* Versions 1.02 Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dcs-5230l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dcs-6410_firmware:1.00:*:*:*:*:*:*:* Versions 1.00 Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dcs-6410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dcs-7410_firmware:1.00:*:*:*:*:*:*:* Versions 1.00 Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dcs-7410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dcs-7510_firmware:1.00:*:*:*:*:*:*:* Versions 1.00 Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dcs-7510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:wcs-1100_firmware:1.00:*:*:*:*:*:*:* Versions 1.00 Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:wcs-1100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2013-1599
- 2026-10-03 Alias added: GHSA-fwq8-q6c7-f4w8
References
More D-Link Japan K.K. Dcs-1100 Firmware vulnerabilities
- TI-2017-05971 An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. CVSS 3.1HIGH 8.8
- TI-2017-05968 An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. CVSS 3.1HIGH 8.8
- TI-2017-05965 An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. CVSS 3.1CRITICAL 9.8
- TI-2017-05970 An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. CVSS 3.1CRITICAL 9.8
- TI-2013-01409 An Information Disclosure vulnerability exists due to insufficient validation of… CVSS 3.1HIGH 7.5
- TI-2017-05967 An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. CVSS 3.1HIGH 8.8
Sources
- CVE-2013-1599 · CVE Program
- CVE-2013-1599 · NVD
- FIRST EPSS
- GHSA-fwq8-q6c7-f4w8 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences