CVE-2017-17020

On D-Link DCS-5009 devices with firmware 1.08.11 and earlier, DCS-5010 devices with firmware 1.14.09 and earlier, and DCS-5020L devices with firmware before 1.15.01, command injection in alphapd (binary responsible for running the camera's web server) allows remote authenticated attackers to execute code through sanitized /setSystemAdmin user input in the AdminID field being passed directly to a call to system.

• CWE-78

• http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10084Vendor Advisory
• https://www.fidusinfosec.com/dlink-dcs-5030l-remote-code-execution-cve-2017-17020/Exploit, Third Party Advisory
• http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10084Vendor Advisory
• https://www.fidusinfosec.com/dlink-dcs-5030l-remote-code-execution-cve-2017-17020/Exploit, Third Party Advisory

Published

May 1, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-17006Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-17007Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-17008Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-17009Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-1701IBM Team Concert (RTC) 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2,…
• CVE-2017-17010Untrusted search path vulnerability in Content Manager Assis…
• CVE-2017-17023The Sophos UTM VPN endpoint interacts with client software p…
• CVE-2017-17027A buffer overflow vulnerability in FTP service in QNAP QTS v…
• CVE-2017-17028A buffer overflow vulnerability in external device function …
• CVE-2017-17029A buffer overflow vulnerability in login function in QNAP QT…
• CVE-2017-17030A buffer overflow vulnerability in login function in QNAP QT…
• CVE-2017-17031A buffer overflow vulnerability in password function in QNAP…