D-Link Dcs-2103 Hd Cube Network Camera Firmware vulnerabilities

2 CVEs affecting D-Link Dcs-2103 Hd Cube Network Camera Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-9238, published 2014-12-03.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-9234, published 2014-12-03. Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days. Directory traversal vulnerability in cgi-bin/sddownload.cgi in D-link IP camera DCS-2103 with firmware 1.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
• CVE-2014-9238, published 2014-12-03. Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days. D-link IP camera DCS-2103 with firmware 1.0.0 allows remote attackers to obtain the installation path via the file parameter to cgi-bin/sddownload.cgi, as demonstrated by a / (forward slash)…