Read the docs
TI-2013-01409 Aliases CVE-2013-1602GHSA-2hp5-8v8q-wx26

An Information Disclosure vulnerability exists due to insufficient validation of…

Priority MEDIUM 49CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-200.

Summary

An Information Disclosure vulnerability exists due to insufficient validation of authentication cookies for the RTSP session in D-Link DCS-5635 1.01, DCS-1100L 1.04, DCS-1130L 1.04, DCS-1100 1.03/1.04_US, DCS-1130 1.03/1.04_US , DCS-2102 1.05_RU/1.06/1.06_FR/1.05_TESCO, DCS-2121 1.05_RU/1.06/1.06_FR/1.05_TESCO, DCS-3410 1.02, DCS-5230 1.02, DCS-5230L 1.02, DCS-6410 1.0, DCS-7410 1.0, DCS-7510 1.0, and WCS-1100 1.02, which could let a malicious user obtain unauthorized access to video streams.

Why it matters now

EPSS 0.15077 96th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 38

CPEVersionsRoleVendor
cpe:2.3:o:dlink:dcs-3411_firmware:1.02:*:*:*:*:*:*:*1.02VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-3411:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-3430_firmware:1.02:*:*:*:*:*:*:*1.02VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-3430:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-5605_firmware:1.01:*:*:*:*:*:*:*1.01VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-5605:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-5635_firmware:1.01:*:*:*:*:*:*:*1.01VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-5635:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-1100l_firmware:1.04:*:*:*:*:*:*:*1.04VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-1100l:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-3411_firmware:1.02:*:*:*:*:*:*:* Versions 1.02 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-3411:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-3430_firmware:1.02:*:*:*:*:*:*:* Versions 1.02 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-3430:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-5605_firmware:1.01:*:*:*:*:*:*:* Versions 1.01 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-5605:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-5635_firmware:1.01:*:*:*:*:*:*:* Versions 1.01 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-5635:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-1100l_firmware:1.04:*:*:*:*:*:*:* Versions 1.04 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-1100l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
Show 28 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:dlink:dcs-1130l_firmware:1.04:*:*:*:*:*:*:*1.04VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-1130l:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-1100_firmware:1.03:*:*:*:*:*:*:*1.03VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-1100_firmware:1.04:*:*:*:*:*:*:*1.04VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-1100:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-1130_firmware:1.03:*:*:*:*:*:*:*1.03VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-1130_firmware:1.04:*:*:*:*:*:*:*1.04VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-1130:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-2102_firmware:1.05:*:*:*:*:*:*:*1.05VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-2102_firmware:1.06:*:*:*:*:*:*:*1.06VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-2102:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-2121_firmware:1.05:*:*:*:*:*:*:*1.05VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-2121_firmware:1.06:*:*:*:*:*:*:*1.06VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-2121:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-3410_firmware:1.02:*:*:*:*:*:*:*1.02VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-3410:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-5230_firmware:1.02:*:*:*:*:*:*:*1.02VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-5230:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-5230l_firmware:1.02:*:*:*:*:*:*:*1.02VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-5230l:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-6410_firmware:1.00:*:*:*:*:*:*:*1.00VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-6410:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-7410_firmware:1.00:*:*:*:*:*:*:*1.00VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-7410:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-7510_firmware:1.00:*:*:*:*:*:*:*1.00VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-7510:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:wcs-1100_firmware:1.00:*:*:*:*:*:*:*1.00VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:wcs-1100:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-1130l_firmware:1.04:*:*:*:*:*:*:* Versions 1.04 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-1130l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-1100_firmware:1.03:*:*:*:*:*:*:* Versions 1.03 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-1100_firmware:1.04:*:*:*:*:*:*:* Versions 1.04 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-1100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-1130_firmware:1.03:*:*:*:*:*:*:* Versions 1.03 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-1130_firmware:1.04:*:*:*:*:*:*:* Versions 1.04 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-1130:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-2102_firmware:1.05:*:*:*:*:*:*:* Versions 1.05 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-2102_firmware:1.06:*:*:*:*:*:*:* Versions 1.06 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-2102:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-2121_firmware:1.05:*:*:*:*:*:*:* Versions 1.05 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-2121_firmware:1.06:*:*:*:*:*:*:* Versions 1.06 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-2121:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-3410_firmware:1.02:*:*:*:*:*:*:* Versions 1.02 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-3410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-5230_firmware:1.02:*:*:*:*:*:*:* Versions 1.02 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-5230:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-5230l_firmware:1.02:*:*:*:*:*:*:* Versions 1.02 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-5230l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-6410_firmware:1.00:*:*:*:*:*:*:* Versions 1.00 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-6410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-7410_firmware:1.00:*:*:*:*:*:*:* Versions 1.00 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-7410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-7510_firmware:1.00:*:*:*:*:*:*:* Versions 1.00 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-7510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:wcs-1100_firmware:1.00:*:*:*:*:*:*:* Versions 1.00 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:wcs-1100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-1602
  2. 2026-10-03 Alias added: GHSA-2hp5-8v8q-wx26

References

Exploit 1

Advisory 1

  • TI-2013-01406 A Command Injection vulnerability exists in the /var/www/cgi-bin/rtpd.cgi script in… CVSS 3.1CRITICAL 9.8
  • TI-2017-05971 An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. CVSS 3.1HIGH 8.8
  • TI-2017-05968 An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. CVSS 3.1HIGH 8.8
  • TI-2017-05965 An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. CVSS 3.1CRITICAL 9.8
  • TI-2017-05970 An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. CVSS 3.1CRITICAL 9.8
  • TI-2017-05967 An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. CVSS 3.1HIGH 8.8
See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences