PT-2026-141273
CVE-2026-125079
·
Published
2026-11-10
·
Updated
2026-11-10
Description by
CVSS 2.0
5.0
MediumMetricsAV:N/AC:L/Au:N/C:P/I:N/A:N
A vulnerability was determined in D-Link DCS-6501LH 3.03.02. This impacts the function pf get onvif user pwd/mydlink default sys info of the file /mnt/conf/SystemConfig.ini of the component Media Service. This manipulation of the argument pin code causes hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾