Strix
26.1K

CVE-2018-18441

UnknownEPSS 1.94%

Last modified

CVE-2018-18441 is a vulnerability of currently unknown severity. D-Link DCS series Wi-Fi cameras expose sensitive information regarding the device configuration. The affected devices include many of DCS series, such as: DCS-936L, DCS-942L, DCS-8000LH, DCS-942LB1, DCS-5222L, DCS-825L, DCS-2630L, DCS-820L, DCS-855L, DCS-2121, DCS-5222LB1, DCS-5020L, and many more. EPSS estimates a 1.94% chance of exploitation in the next 30 days.

Description

D-Link DCS series Wi-Fi cameras expose sensitive information regarding the device configuration. The affected devices include many of DCS series, such as: DCS-936L, DCS-942L, DCS-8000LH, DCS-942LB1, DCS-5222L, DCS-825L, DCS-2630L, DCS-820L, DCS-855L, DCS-2121, DCS-5222LB1, DCS-5020L, and many more. There are many affected firmware versions starting from 1.00 and above. The configuration file can be accessed remotely through: <Camera-IP>/common/info.cgi, with no authentication. The configuration file include the following fields: model, product, brand, version, build, hw_version, nipca version, device name, location, MAC address, IP address, gateway IP address, wireless status, input/output settings, speaker, and sensor settings.

Metrics

EPSS Probability
1.94%

77.6th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
D-LinkDcs-936l Firmware>= 1.00
DlinkDcs-942l Firmware>= 1.00
D-LinkDcs-8000lh Firmware>= 1.00
D-LinkDcs-942lb1 Firmware>= 1.00
D-LinkDcs-5222l Firmware>= 1.00
D-LinkDcs-825l Firmware>= 1.00
D-LinkDcs-2630l Firmware>= 1.00
D-LinkDcs-820l Firmware>= 1.00
D-LinkDcs-855l Firmware>= 1.00
D-LinkDcs-2121 Firmware>= 1.00
D-LinkDcs-5222lb1 Firmware>= 1.00
DlinkDcs-5020l Firmware>= 1.00
DlinkDcs-930l Firmware>= 1.00
D-LinkDcs-8100lh Firmware>= 1.00
DlinkDcs-932l Firmware>= 1.00
D-LinkDcs-2102 Firmware>= 1.00
DlinkDcs-933l Firmware>= 1.00
DlinkDcs-5030l Firmware>= 1.00

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2018-18441?
D-Link DCS series Wi-Fi cameras expose sensitive information regarding the device configuration. The affected devices include many of DCS series, such as: DCS-936L, DCS-942L, DCS-8000LH, DCS-942LB1, DCS-5222L, DCS-825L, DCS-2630L, DCS-820L, DCS-855L, DCS-2121, DCS-5222LB1, DCS-5020L, and many more. There are many affected firmware versions starting from 1.00 and above. The configuration file can be accessed remotely through: <Camera-IP>/common/info.cgi, with no authentication. The configuration file include the following fields: model, product, brand, version, build, hw_version, nipca version, device name, location, MAC address, IP address, gateway IP address, wireless status, input/output settings, speaker, and sensor settings.
How severe is CVE-2018-18441?
Severity scoring for CVE-2018-18441 is pending analysis. The EPSS model estimates a 1.94% probability of exploitation in the next 30 days.
How do I fix CVE-2018-18441?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-18441?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST