VYPR

Mydlink\+

by Dlink

CVEs (3)

  • CVE-2018-7698HigMar 5, 2018
    risk 0.53cvss 8.1epss 0.01

    An issue was discovered in D-Link mydlink+ 3.8.5 build 259 for DCS-933L 1.05.04 and DCS-934L 1.05.04 devices. The mydlink+ app sends the username and password for connected D-Link cameras (such as DCS-933L and DCS-934L) unencrypted from the app to the camera, allowing attackers…

  • CVE-2017-14428HigSep 13, 2017
    risk 0.51cvss 7.8epss 0.00

    D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0666 /var/run/hostapd* permissions.

  • CVE-2019-7642HigMar 25, 2019
    risk 0.49cvss 7.5epss 0.03

    D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can remotely obtain users' DNS query logs and login logs. Vulnerable targets include but are not limited to the latest firmware versions of DIR-817LW (A1-1.04),…