Read the docs
TI-2019-08217 Aliases CVE-2019-10999GHSA-fc75-7wcg-rxg8

The D-Link DCS series of Wi-Fi cameras contains a stack-based buffer overflow in alphapd…

Priority MEDIUM 44CWE-787Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-787 and the CVSS impact.

Summary

The D-Link DCS series of Wi-Fi cameras contains a stack-based buffer overflow in alphapd, the camera's web server. The overflow allows a remotely authenticated attacker to execute arbitrary code by providing a long string in the WEPEncryption parameter when requesting wireless.htm. Vulnerable devices include DCS-5009L (1.08.11 and below), DCS-5010L (1.14.09 and below), DCS-5020L (1.15.12 and below), DCS-5025L (1.03.07 and below), DCS-5030L (1.04.10 and below), DCS-930L (2.16.01 and below), DCS-931L (1.14.11 and below), DCS-932L (2.17.01 and below), DCS-933L (1.14.11 and below), and DCS-934L (1.05.04 and below).

Why it matters now

EPSS 0.03593 89th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 20

CPEVersionsRoleVendor
cpe:2.3:o:dlink:dcs-930l_firmware:*:*:*:*:*:*:*:*up to 2.16.01VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-930l:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-931l_firmware:*:*:*:*:*:*:*:*up to 1.14.11VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-931l:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-932l_firmware:*:*:*:*:*:*:*:*up to 2.17.01VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-932l:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-933l_firmware:*:*:*:*:*:*:*:*up to 1.14.11VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-933l:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-934l_firmware:*:*:*:*:*:*:*:*up to 1.05.04VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-934l:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-930l_firmware:*:*:*:*:*:*:*:* Versions up to 2.16.01 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-930l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-931l_firmware:*:*:*:*:*:*:*:* Versions up to 1.14.11 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-931l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-932l_firmware:*:*:*:*:*:*:*:* Versions up to 2.17.01 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-932l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-933l_firmware:*:*:*:*:*:*:*:* Versions up to 1.14.11 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-933l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-934l_firmware:*:*:*:*:*:*:*:* Versions up to 1.05.04 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-934l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
Show 10 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:dlink:dcs-5009l_firmware:*:*:*:*:*:*:*:*up to 1.08.11VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-5009l:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-5010l_firmware:*:*:*:*:*:*:*:*up to 1.14.09VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-5010l:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-5020l_firmware:*:*:*:*:*:*:*:*up to 1.15.12VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-5020l:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-5025l_firmware:*:*:*:*:*:*:*:*up to 1.03.07VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-5025l:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dcs-5030l_firmware:*:*:*:*:*:*:*:*up to 1.04.10VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dcs-5030l:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-5009l_firmware:*:*:*:*:*:*:*:* Versions up to 1.08.11 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-5009l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-5010l_firmware:*:*:*:*:*:*:*:* Versions up to 1.14.09 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-5010l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-5020l_firmware:*:*:*:*:*:*:*:* Versions up to 1.15.12 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-5020l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-5025l_firmware:*:*:*:*:*:*:*:* Versions up to 1.03.07 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-5025l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dcs-5030l_firmware:*:*:*:*:*:*:*:* Versions up to 1.04.10 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dcs-5030l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-10999
  2. 2026-10-03 Alias added: GHSA-fc75-7wcg-rxg8

References

Exploit 1

Other 1

  • TI-2017-05468 D-Link DCS cameras have a weak/insecure CrossDomain.XML file that allows sites hosting… CVSS 3.1HIGH 8.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences