CVE-2013-1600

Name of the Vulnerable Software and Affected Versions: D-Link DCS-2121 versions 1.05 TESCO through 1.06 D-Link DCS-2102 versions 1.05 TESCO through 1.06

Description: An Authentication Bypass issue exists in the upnp/asf-mp4.asf component when streaming live video, potentially allowing a malicious user to obtain sensitive information.

Recommendations: For D-Link DCS-2121 versions 1.05 TESCO through 1.06, consider disabling the upnp/asf-mp4.asf component until a patch is available. For D-Link DCS-2102 versions 1.05 TESCO through 1.06, consider disabling the upnp/asf-mp4.asf component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.