D-Link DCS-935L vulnerabilities

A vulnerability was found in D-Link DCS-935L camera firmware version 1.10.01, allowing OS command injection. The issue resides in the sub_400E40 function of the setconf.cgi file, where the UID argument is mishandled by the POST Parameter Handler component. The attack can be launched remotely, and exploit details are publicly available.

A vulnerability in D-Link DCS-935L 1.10.01 affects the snprintf function in the file /web/cgi-bin/greece/rhea of the HTTP Handler component. Manipulation of the data argument leads to a format string vulnerability. The attack can be launched remotely, and the exploit has been publicly disclosed.

A vulnerability was found in D-Link DCS-935L up to 1.10.01 in the SetDeviceSettings function of /web/cgi-bin/hnap/hnap_service. Manipulating the AdminPassword argument results in a buffer overflow. The attack can be executed remotely, and the exploit is publicly available.