CVE-2021-41503

DCS-5000L v1.05 and DCS-932L v2.17 and older are affecged by Incorrect Acess Control

High · published September 24, 2021

CVSS v3.1
8.0
EPSS
0%
Percentile
37.7
In the wild
Unconfirmed
What it is

DCS-5000L v1.05 and DCS-932L v2.17 and older are affecged by Incorrect Acess Control. The use of the basic authentication for the devices command interface allows attack vectors that may compromise the cameras configuration and allow malicious users on the LAN to access the device. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00446 · 37.7th percentile
Published
2021-09-24T19:26Z
EPSS history
Timeline
  • 24 SEP 19:26Z
    DCS-5000L v1.05 and DCS-932L v2.17 and older are affecged by Incorrect Acess Control
    cvelistv5