CVE-2015-2049

Related Files

D-Link DCS-931L Arbitrary File Upload

Posted Jan 6, 2016

Authored by Brendan Coles, J. Rach, Allen Harper, Mike Baucom | Site metasploit.com

This Metasploit module exploits a file upload vulnerability in D-Link DCS-931L network cameras. The setFileUpload functionality allows authenticated users to upload files to anywhere on the file system, allowing system files to be overwritten, resulting in execution of arbitrary commands. This Metasploit module has been tested successfully on a D-Link DCS-931L with firmware versions 1.01_B7 (2013-04-19) and 1.04_B1 (2014-04-21). D-Link DCS-930L, DCS-932L, DCS-933L models are also reportedly affected, but untested.

tags | exploit, arbitrary, file upload

advisories | CVE-2015-2049

SHA-256 | c85dbfd5bafc99162dc8561e5db898e4cfbb36756d3c4d4763c20bae09a13a20

Download | Favorite | View