Threats tagged 'ghsa-cwrm-p6wp-ch6h'

A vulnerability in D-Link DCS-6501LH version 3.03.02 allows remote attackers to exploit hard-coded credentials via manipulation of the pin_code argument in the Media Service component. The flaw affects the pf_get_onvif_user_pwd/mydlink_default_sys_info function in the SystemConfig.ini file. Public exploit details have been disclosed. The vulnerability has a medium severity rating with a CVSS score of 5.3.