Read the docs
TI-2013-01410 Aliases CVE-2013-1603GHSA-59jf-rvgr-hx6h

An Authentication vulnerability exists in D-LINK WCS-1100 1.02, TESCO DCS-2121…

Priority MEDIUM 40CWE-798Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
Low · None · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-798.

Summary

An Authentication vulnerability exists in D-LINK WCS-1100 1.02, TESCO DCS-2121 1.05_TESCO, TESCO DCS-2102 1.05_TESCO, DCS-7510 1.00, DCS-7410 1.00, DCS-6410 1.00, DCS-5635 1.01, DCS-5605 1.01, DCS-5230L 1.02, DCS-5230 1.02, DCS-3430 1.02, DCS-3411 1.02, DCS-3410 1.02, DCS-2121 1.06_FR, DCS-2121 1.06, DCS-2121 1.05_RU, DCS-2102 1.06_FR, DCS-2102 1.06, DCS-2102 1.05_RU, DCS-1130L 1.04, DCS-1130 1.04_US, DCS-1130 1.03, DCS-1100L 1.04, DCS-1100 1.04_US, and DCS-1100 1.03 due to hard-coded credentials that serve as a backdoor, which allows remote attackers to access the RTSP video stream.

Why it matters now

EPSS 0.16129 96th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 38

CPEVersionsRoleVendor
cpe:2.3:o:dlink:dcs-3411_firmware:1.02:*:*:*:*:*:*:*1.02VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-3411:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-3430_firmware:1.02:*:*:*:*:*:*:*1.02VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-3430:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-5605_firmware:1.01:*:*:*:*:*:*:*1.01VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-5605:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-5635_firmware:1.01:*:*:*:*:*:*:*1.01VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-5635:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-1100l_firmware:1.04:*:*:*:*:*:*:*1.04VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-1100l:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-3411_firmware:1.02:*:*:*:*:*:*:* Versions 1.02 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-3411:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-3430_firmware:1.02:*:*:*:*:*:*:* Versions 1.02 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-3430:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-5605_firmware:1.01:*:*:*:*:*:*:* Versions 1.01 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-5605:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-5635_firmware:1.01:*:*:*:*:*:*:* Versions 1.01 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-5635:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-1100l_firmware:1.04:*:*:*:*:*:*:* Versions 1.04 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-1100l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
Show 28 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:dlink:dcs-1130l_firmware:1.04:*:*:*:*:*:*:*1.04VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-1130l:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-1100_firmware:1.03:*:*:*:*:*:*:*1.03VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-1100_firmware:1.04:*:*:*:*:*:*:*1.04VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-1100:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-1130_firmware:1.03:*:*:*:*:*:*:*1.03VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-1130_firmware:1.04:*:*:*:*:*:*:*1.04VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-1130:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-2102_firmware:1.05:*:*:*:*:*:*:*1.05VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-2102_firmware:1.06:*:*:*:*:*:*:*1.06VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-2102:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-2121_firmware:1.05:*:*:*:*:*:*:*1.05VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-2121_firmware:1.06:*:*:*:*:*:*:*1.06VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-2121:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-3410_firmware:1.02:*:*:*:*:*:*:*1.02VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-3410:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-5230_firmware:1.02:*:*:*:*:*:*:*1.02VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-5230:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-5230l_firmware:1.02:*:*:*:*:*:*:*1.02VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-5230l:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-6410_firmware:1.00:*:*:*:*:*:*:*1.00VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-6410:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-7410_firmware:1.00:*:*:*:*:*:*:*1.00VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-7410:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-7510_firmware:1.00:*:*:*:*:*:*:*1.00VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-7510:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:wcs-1100_firmware:1.00:*:*:*:*:*:*:*1.00VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:wcs-1100:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-1130l_firmware:1.04:*:*:*:*:*:*:* Versions 1.04 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-1130l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-1100_firmware:1.03:*:*:*:*:*:*:* Versions 1.03 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-1100_firmware:1.04:*:*:*:*:*:*:* Versions 1.04 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-1100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-1130_firmware:1.03:*:*:*:*:*:*:* Versions 1.03 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-1130_firmware:1.04:*:*:*:*:*:*:* Versions 1.04 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-1130:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-2102_firmware:1.05:*:*:*:*:*:*:* Versions 1.05 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-2102_firmware:1.06:*:*:*:*:*:*:* Versions 1.06 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-2102:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-2121_firmware:1.05:*:*:*:*:*:*:* Versions 1.05 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-2121_firmware:1.06:*:*:*:*:*:*:* Versions 1.06 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-2121:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-3410_firmware:1.02:*:*:*:*:*:*:* Versions 1.02 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-3410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-5230_firmware:1.02:*:*:*:*:*:*:* Versions 1.02 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-5230:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-5230l_firmware:1.02:*:*:*:*:*:*:* Versions 1.02 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-5230l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-6410_firmware:1.00:*:*:*:*:*:*:* Versions 1.00 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-6410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-7410_firmware:1.00:*:*:*:*:*:*:* Versions 1.00 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-7410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-7510_firmware:1.00:*:*:*:*:*:*:* Versions 1.00 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-7510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:wcs-1100_firmware:1.00:*:*:*:*:*:*:* Versions 1.00 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:wcs-1100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-1603
  2. 2026-10-03 Alias added: GHSA-59jf-rvgr-hx6h

References

Exploit 1

Advisory 1

  • TI-2013-01406 A Command Injection vulnerability exists in the /var/www/cgi-bin/rtpd.cgi script in… CVSS 3.1CRITICAL 9.8
  • TI-2017-05971 An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. CVSS 3.1HIGH 8.8
  • TI-2017-05968 An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. CVSS 3.1HIGH 8.8
  • TI-2017-05965 An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. CVSS 3.1CRITICAL 9.8
  • TI-2017-05970 An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. CVSS 3.1CRITICAL 9.8
  • TI-2013-01409 An Information Disclosure vulnerability exists due to insufficient validation of… CVSS 3.1HIGH 7.5
See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences