CVE-2013-1600

Vulnerability

An authentication bypass vulnerability exists in the upnp/asf-mp4.asf endpoint when streaming live video on D-Link TESCO DCS-2121 and DCS-2102 cameras. Affected firmware versions include 1.05_TESCO, 1.06_FR, 1.06, and 1.05_RU for both models (with specific combinations per model). The endpoint fails to enforce proper authentication, allowing unauthenticated access to the live video stream.

Exploitation

An attacker can exploit this vulnerability by sending a direct request to the upnp/asf-mp4.asf endpoint without any authentication credentials. No special network position is required beyond network access to the camera. The attacker does not need user interaction or prior access; the bypass is triggered simply by accessing the vulnerable URL.

Impact

Successful exploitation allows an attacker to obtain the live video feed from the camera, leading to unauthorized surveillance and potential privacy breaches. The attacker gains access to sensitive visual information without any authentication.

Mitigation

No official patch is mentioned in the available references [1]. Users should check for firmware updates from D-Link. If no update exists, restrict network access to the camera, disable UPnP, or block access to the streaming endpoint via firewall rules. The vulnerability is documented on Packet Storm [1].