VulnerabilityModified

CVE-2013-1599

EXPLOIT ✓CRITICAL 9.8EPSS 40.4%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 40.4%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.

Description

A Command Injection vulnerability exists in the /var/www/cgi-bin/rtpd.cgi script in D-Link IP Cameras DCS-3411/3430 firmware 1.02, DCS-5605/5635 1.01, DCS-1100L/1130L 1.04, DCS-1100/1130 1.03, DCS-1100/1130 1.04_US, DCS-2102/2121 1.05_RU, DCS-3410 1.02, DCS-5230 1.02, DCS-5230L 1.02, DCS-6410 1.00, DCS-7410 1.00, DCS-7510 1.00, and WCS-1100 1.02, which could let a remote malicious user execute arbitrary commands through the camera’s web interface.

CVSS 3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 40.35% probability · 99th percentile
Public exploits: 1 in Exploit-DB · verified · first 1 May 2013
CISA KEV: Not listed
Weakness: CWE-78
Affected: dlink/dcs-3411 firmware · dlink/dcs-3430 firmware · dlink/dcs-5605 firmware · dlink/dcs-5635 firmware · dlink/dcs-1100l firmware · dlink/dcs-1130l firmware · dlink/dcs-1100 firmware · dlink/dcs-1130 firmware · dlink/dcs-2102 firmware · dlink/dcs-2121 firmware · dlink/dcs-3410 firmware · dlink/dcs-5230 firmware · dlink/dcs-5230l firmware · dlink/dcs-6410 firmware · dlink/dcs-7410 firmware · dlink/dcs-7510 firmware · dlink/wcs-1100 firmware
Source: cve@mitre.org

EPSS trend

EPSS 40.4% since 3 November 2026; no change recorded yet. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

Public exploits (1)

Entries in Exploit-DB that cite this CVE. Links go to the Exploit-DB page and to the file in the public repository; nothing is hosted here. A verified tick means the Exploit-DB team confirmed the exploit works against the stated version.

EDB-ID	Title	Type	Published	Verified
EDB-25138 source ↗	D-Link IP Cameras - Multiple Vulnerabilitieshardware · Core Security	webapps	1 May 2013	yes

References

http://www.exploit-db.com/exploits/25138Exploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/59564Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/83941Third Party Advisory, VDB Entry
https://packetstormsecurity.com/files/cve/CVE-2013-1599Third Party Advisory, VDB Entry
https://seclists.org/fulldisclosure/2013/Apr/253Exploit, Mailing List, Third Party Advisory
https://www.coresecurity.com/advisories/d-link-ip-cameras-multiple-vulnerabilitiesExploit, Third Party Advisory
http://www.exploit-db.com/exploits/25138Exploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/59564Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/83941Third Party Advisory, VDB Entry
https://packetstormsecurity.com/files/cve/CVE-2013-1599Third Party Advisory, VDB Entry
https://seclists.org/fulldisclosure/2013/Apr/253Exploit, Mailing List, Third Party Advisory
https://www.coresecurity.com/advisories/d-link-ip-cameras-multiple-vulnerabilitiesExploit, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.