High severity8.1NVD Advisory· Published Mar 5, 2018· Updated Jun 17, 2026

CVE-2018-7698

Description

An issue was discovered in D-Link mydlink+ 3.8.5 build 259 for DCS-933L 1.05.04 and DCS-934L 1.05.04 devices. The mydlink+ app sends the username and password for connected D-Link cameras (such as DCS-933L and DCS-934L) unencrypted from the app to the camera, allowing attackers to obtain these credentials and gain control of the camera including the ability to view the camera's stream and make changes without the user's knowledge.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dlink/mydlinkllm-create
Range: = 3.8.5 build 259
Dlink/DCS-934Lllm-create
Range: = 1.05.04
Dlink/DCS-933Lllm-fuzzy
Range: = 1.05.04

Patches

Vulnerability mechanics

References

blog.nickleghorn.com/2019/06/16/d-link-security-cameras-using-mydlink-app-leak-passwords/nvd

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000