CSRF in Dlink Dcs-2132l
CVE-2017-7852
D-Link DCS cameras have a weak/insecure CrossDomain.XML file that allows sites hosting malicious Flash objects to access and/or change the device's settings via a CSRF attack. This is because of the 'allow-access-from domain' child element set to *, thus accepting requests from any domain. If a victim logged into the camera's web console visits a malicious site hosting a malicious Flash file from another Browser tab, the malicious Flash file then can send requests to the victim's DCS series Camera without knowing the credentials. An attacker can host a malicious Flash file that can retrieve Live Feeds or information from the victim's DCS series Camera, add new admin users, or make other changes to the device. Known affected devices are DCS-933L with firmware before 1.13.05, DCS-5030L, DCS-5020L, DCS-2530L, DCS-2630L, DCS-930L, DCS-932L, and DCS-932LB1.
Vulnerability class: CSRF (Cross-Site Request Forgery)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.043 (90.8th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 91st percentile — 90.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.043 · newest: 0.043 · change: 0.000
Affected products
Weakness classification (CWE)
Public proof-of-concept exploits
References
- www.qualys.com/2017/02/22/qsa-2017-02-22/qsa-2017-02-22.pdf (Exploit, Third Party Advisory, Mitigation)
Frequently asked questions
- What is CVE-2017-7852?
- CVE-2017-7852 is a high-severity vulnerability in Dlink Dcs-2132l, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.8/10. Published 2017-04-24.
- How severe is CVE-2017-7852?
- High severity. CVSS v3 base score is 8.8 out of 10.
- Is CVE-2017-7852 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.