CVE-2019-10999

CWE-787 — Out-of-bounds Write3 documents3 sources
Severity
8.8HIGH
EPSS
35.8%
top 2.92%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
Dlink Dcs-5009l FirmwareDlink Dcs-5010l FirmwareDlink Dcs-5020l Firmware+7 more
Timeline
PublishedMay 6
Latest updateMay 24

Description

The D-Link DCS series of Wi-Fi cameras contains a stack-based buffer overflow in alphapd, the camera's web server. The overflow allows a remotely authenticated attacker to execute arbitrary code by providing a long string in the WEPEncryption parameter when requesting wireless.htm. Vulnerable devices include DCS-5009L (1.08.11 and below), DCS-5010L (1.14.09 and below), DCS-5020L (1.15.12 and below), DCS-5025L (1.03.07 and below), DCS-5030L (1.04.10 and below), DCS-930L (2.16.01 and below), DCS-9…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages10 packages

🔴Vulnerability Details

2
GHSA
GHSA-fc75-7wcg-rxg8: The D-Link DCS series of Wi-Fi cameras contains a stack-based buffer overflow in alphapd, the camera's web server↗2022-05-24
▶
CVEList
CVE-2019-10999: The D-Link DCS series of Wi-Fi cameras contains a stack-based buffer overflow in alphapd, the camera's web server↗2019-05-06
▶
CVE-2019-10999 (HIGH CVSS 8.8) | The D-Link DCS series of Wi-Fi came | cvebase.io