CVE-2021-41503

Severity: high (CVSS 8.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-09-24 · updated 2026-06-17
Weakness: CWE-287

Description

DCS-5000L v1.05 and DCS-932L v2.17 and older are affecged by Incorrect Acess Control. The use of the basic authentication for the devices command interface allows attack vectors that may compromise the cameras configuration and allow malicious users on the LAN to access the device. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

Affected products

D-Link Dcs-5000L Firmware: 1.05
D-Link DCS-932L: through 2.17

References

https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10247
https://www.dlink.com/en/security-bulletin/
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10247
https://www.dlink.com/en/security-bulletin/

Get alerted when CVE-2021-41503 or the next vulnerability affects your stack