What is CVE-2021-41503?

CVE-2021-41503 is a high-severity vulnerability in D-link Dcs-5000l_firmware, classified under Improper Authentication. CVSS score: 8.0/10. Published 2021-09-24.

How severe is CVE-2021-41503?

High severity. CVSS v3 base score is 8.0 out of 10.

Auth bypass in D-link Dcs-5000l_firmware

CVE-2021-41503

DCS-5000L v1.05 and DCS-932L v2.17 and older are affecged by Incorrect Acess Control. The use of the basic authentication for the devices command interface allows attack vectors that may compromise the cameras configuration and allow malic…

Vulnerability class: Broken Authentication

EPSS: 0.004 (36.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.0 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

D-link Dcs-5000l_firmware — versions 1.05
Dlink Dcs-5000l
Dlink Dcs-932l
Dlink Dcs-932l_firmware
N/a — versions n/a

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)
cve@mitre.org (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-41503?: CVE-2021-41503 is a high-severity vulnerability in D-link Dcs-5000l_firmware, classified under Improper Authentication. CVSS score: 8.0/10. Published 2021-09-24.
How severe is CVE-2021-41503?: High severity. CVSS v3 base score is 8.0 out of 10.