D-Link Dcs-825l Firmware vulnerabilities

3 CVEs affecting D-Link Dcs-825l Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-18767, published 2018-12-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-18441, published 2018-12-20. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. D-Link DCS series Wi-Fi cameras expose sensitive information regarding the device configuration. The affected devices include many of DCS series, such as: DCS-936L, DCS-942L, DCS-8000LH, DCS-942LB1,…
CVE-2018-18442, published 2018-12-20. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. D-Link DCS-825L devices with firmware 1.08 do not employ a suitable mechanism to prevent denial-of-service (DoS) attacks. An attacker can harm the device availability (i.e., live-online video/audio…
CVE-2018-18767, published 2018-12-20. High severity, CVSS 7.0. EPSS: 0.6% chance of exploitation in the next 30 days. An issue was discovered in D-Link 'myDlink Baby App' version 2.04.06. Whenever actions are performed from the app (e.g., change camera settings or play lullabies), it communicates directly with the…