CVE-2013-1603

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 16.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2020-01-28 · updated 2026-06-16
Weakness: CWE-798

Description

An Authentication vulnerability exists in D-LINK WCS-1100 1.02, TESCO DCS-2121 1.05_TESCO, TESCO DCS-2102 1.05_TESCO, DCS-7510 1.00, DCS-7410 1.00, DCS-6410 1.00, DCS-5635 1.01, DCS-5605 1.01, DCS-5230L 1.02, DCS-5230 1.02, DCS-3430 1.02, DCS-3411 1.02, DCS-3410 1.02, DCS-2121 1.06_FR, DCS-2121 1.06, DCS-2121 1.05_RU, DCS-2102 1.06_FR, DCS-2102 1.06, DCS-2102 1.05_RU, DCS-1130L 1.04, DCS-1130 1.04_US, DCS-1130 1.03, DCS-1100L 1.04, DCS-1100 1.04_US, and DCS-1100 1.03 due to hard-coded credentials that serve as a backdoor, which allows remote attackers to access the RTSP video stream.

Affected products

Dlink Dcs-1100 Firmware: 1.03, 1.04
Dlink Dcs-1100L Firmware: 1.04
Dlink Dcs-1130 Firmware: 1.03, 1.04
Dlink Dcs-1130L Firmware: 1.04
Dlink Dcs-2102 Firmware: 1.05, 1.06
Dlink Dcs-2121 Firmware: 1.05, 1.06
Dlink Dcs-3410 Firmware: 1.02
Dlink Dcs-3411 Firmware: 1.02
Dlink Dcs-3430 Firmware: 1.02
Dlink Dcs-5230 Firmware: 1.02
Dlink Dcs-5230L Firmware: 1.02
Dlink Dcs-5605 Firmware: 1.01
Dlink Dcs-5635 Firmware: 1.01
Dlink Dcs-6410 Firmware: 1.00
Dlink Dcs-7410 Firmware: 1.00
Dlink Dcs-7510 Firmware: 1.00
Dlink Wcs-1100 Firmware: 1.00

References

http://www.securityfocus.com/bid/59571
https://exchange.xforce.ibmcloud.com/vulnerabilities/83940
https://packetstormsecurity.com/files/cve/CVE-2013-1603
https://vuldb.com/?id.8575
https://www.coresecurity.com/advisories/d-link-ip-cameras-multiple-vulnerabilities
http://www.securityfocus.com/bid/59571
https://exchange.xforce.ibmcloud.com/vulnerabilities/83940
https://packetstormsecurity.com/files/cve/CVE-2013-1603
https://vuldb.com/?id.8575
https://www.coresecurity.com/advisories/d-link-ip-cameras-multiple-vulnerabilities

Get alerted when CVE-2013-1603 or the next vulnerability affects your stack