Priority MEDIUM 41
D-Link DCS-932L v2.18.01 is vulnerable to Command Injection in the function sub_42EF14 of the file /bin/alphapd.
CVSS 3.1HIGH 7.3· Network · No auth · No interaction · EPSS 0.01235 · Published 2026-05-11 · No fix listed CWE-77
Priority MEDIUM 57
A vulnerability was found in D-Link DCS-932L 2.18.01.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.14653 · Published 2025-06-04 · No fix listed CWE-77
Priority HIGH 73
A vulnerability was found in D-Link DCS-932L 2.18.01.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.06283 · Published 2025-06-04 · No fix listed CWE-119
Priority MEDIUM 57
A vulnerability was found in D-Link DCS-932L 2.18.01.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.14688 · Published 2025-06-04 · No fix listed CWE-77
Priority HIGH 73
A vulnerability was found in D-Link DCS-932L 2.18.01.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01333 · Published 2025-05-17 · No fix listed CWE-119
Priority HIGH 73
A vulnerability was found in D-Link DCS-932L 2.18.01.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01333 · Published 2025-05-17 · No fix listed CWE-119
Priority HIGH 73
A vulnerability was found in D-Link DCS-932L 2.18.01 and classified as critical.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01333 · Published 2025-05-17 · No fix listed CWE-119
Priority MEDIUM 62
A Stack overflow vulnerability in D-Link DCS-932L REVB_FIRMWARE_2.18.01 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00517 · Published 2024-12-17 · No fix listed CWE-120
Priority LOW 35
An Elevated Privileges issue exists in D-Link DCS-5000L v1.05 and DCS-932L v2.17 and older.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00492 · Published 2021-09-24 · No fix listed
Priority LOW 37
DCS-5000L v1.05 and DCS-932L v2.17 and older are affecged by Incorrect Acess Control.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00446 · Published 2021-09-24 · No fix listed CWE-287
Priority MEDIUM 44
The D-Link DCS series of Wi-Fi cameras contains a stack-based buffer overflow in alphapd, the camera's web server.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03593 · Published 2019-05-06 · No fix listed CWE-787
Priority LOW 37
D-Link DCS series Wi-Fi cameras expose sensitive information regarding the device configuration.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02329 · Published 2018-12-20 · No fix listed CWE-200
Priority MEDIUM 45
D-Link DCS cameras have a weak/insecure CrossDomain.XML file that allows sites hosting malicious Flash objects to access and/or change the device's settings via a CSRF attack.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.04294 · Published 2017-04-24 · No fix listed CWE-352
Priority LOW 17
The D-Link DCS-932L camera with firmware 1.02 allows remote attackers to discover the password via a UDP broadcast packet, as demonstrated by running the D-Link Setup Wizard and reading the _paramR["P"] value.
CVSS 2.0LOW 3.3· Adjacent network · No auth · Interaction — · EPSS 0.00782 · Published 2012-12-24 · No fix listed CWE-200
THREATIST.IORead the docs