CVE-2013-1601

MediumCVSS 5.3/10Last modified Jun 16, 2026

Description

An Information Disclosure vulnerability exists due to a failure to restrict access on the lums.cgi script when processing a live video stream in D-LINK An Information Disclosure vulnerability exists due to a failure to restrict access on the lums.cgi script when processing a live video stream in D-LINK WCS-1100 1.02, TESCO DCS-2121 1.05_TESCO, TESCO DCS-2102 1.05_TESCO, DCS-7510 1.00, DCS-7410 1.00, DCS-6410 1.00, DCS-5635 1.01, DCS-5605 1.01, DCS-5230L 1.02, DCS-5230 1.02, DCS-3430 1.02, DCS-3411 1.02, DCS-3410 1.02, DCS-2121 1.06_FR, DCS-2121 1.06, DCS-2121 1.05_RU, DCS-2102 1.06_FR, DCS-2102 1.06, DCS-2102 1.05_RU, DCS-1130L 1.04, DCS-1130 1.04_US, DCS-1130 1.03, DCS-1100L 1.04, DCS-1100 1.04_US, and DCS-1100 1.03, which could let a malicious user obtain sensitive information. which could let a malicious user obtain sensitive information.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/59570Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/83939Third Party Advisory, VDB Entry
https://packetstormsecurity.com/files/cve/CVE-2013-1601Third Party Advisory, VDB Entry
https://vuldb.com/?id.8573Permissions Required
https://www.coresecurity.com/advisories/d-link-ip-cameras-multiple-vulnerabilitiesExploit, Third Party Advisory
http://www.securityfocus.com/bid/59570Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/83939Third Party Advisory, VDB Entry
https://packetstormsecurity.com/files/cve/CVE-2013-1601Third Party Advisory, VDB Entry
https://vuldb.com/?id.8573Permissions Required
https://www.coresecurity.com/advisories/d-link-ip-cameras-multiple-vulnerabilitiesExploit, Third Party Advisory

Timeline

Published: Jan 28, 2020
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-16027.5An Information Disclosure vulnerability exists due to insufficient validation of authentication cookies for the RTSP session in D-Link DCS-5 CVE-2013-16035.3An Authentication vulnerability exists in D-LINK WCS-1100 1.02, TESCO DCS-2121 1.05_TESCO, TESCO DCS-2102 1.05_TESCO, DCS-7510 1.00, DCS-741 CVE-2013-16045.0Directory traversal vulnerability in MayGion IP Cameras with firmware before 2013.04.22 (05.53) allows remote attackers to read arbitrary fi CVE-2013-16057.5Buffer overflow in MayGion IP Cameras with firmware before 2013.04.22 (05.53) allows remote attackers to execute arbitrary code via a long f CVE-2013-16067.5Buffer overflow in the ubnt-streamer RTSP service on the Ubiquiti UBNT AirCam with airVision firmware before 1.1.6 allows remote attackers t CVE-2013-16079.8Ruby PDFKit gem prior to 0.5.3 has a Code Execution Vulnerability CVE-2013-16086.7Directory traversal vulnerability in the Management Console on the Symantec NetBackup (NBU) appliance 2.0.x allows remote attackers to read CVE-2013-16097.8Multiple unquoted Windows search path vulnerabilities in the (1) File Collector and (2) File PlaceHolder services in Symantec Enterprise Vau CVE-2013-16106.8Unquoted Windows search path vulnerability in RDDService in Symantec PGP Desktop 10.0.x through 10.2.x and Symantec Encryption Desktop 10.3.CVE-2013-16113.5Multiple cross-site scripting (XSS) vulnerabilities in administrative-interface pages in the management console in Symantec Brightmail Gatew CVE-2013-16127.9Buffer overflow in secars.dll in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1.x before 12.1.3, and Symantec En CVE-2013-16134.7SQL injection vulnerability in the management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4.7.x