D-link IP camera DCS-2103 with firmware 1.0.0 allows remote malicious users to obtain the installation path via the file parameter to cgi-bin/sddownload.cgi, as demonstrated by a / (forward slash) character.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
d-link dcs-2103_hd_cube_network_camera_firmware 1.0.0 |