{"id":7438,"date":"2025-06-30T17:46:45","date_gmt":"2025-06-30T17:46:45","guid":{"rendered":"http:\/\/localhost\/?p=7438"},"modified":"2025-06-30T17:46:45","modified_gmt":"2025-06-30T17:46:45","slug":"d-link-dcs-6517dcs-7517-root-password-generation-httpd-generatepassfrommac-entropy","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=7438","title":{"rendered":"D-Link DCS-6517\/DCS-7517 Root Password Generation httpd generate_pass_from_mac entropy"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nD-Link DCS-6517\/DCS-7517 Root Password Generation httpd generate_pass_from_mac entropy<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-06-30T22:32:09.468Z<\/td>\n<\/tr>\n
Last Seen<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nD-Link<\/td>\n<\/tr>\n
Product<\/th>\nDCS-6517<\/td>\n<\/tr>\n
Version<\/th>\n2.02<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n\n\n\n
Base Score<\/th>\n6.3 (MEDIUM)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:4.0\/AV:N\/AC:H\/AT:N\/PR:N\/UI:N\/VC:L\/VI:N\/VA:N\/SC:N\/SI:N\/SA:N\/E:P<\/td>\n<\/tr>\n
Confidentiality Impact<\/th>\n<\/td>\n<\/tr>\n
Integrity Impact<\/th>\n<\/td>\n<\/tr>\n
Availability Impact<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nA vulnerability in D-Link DCS-6517 and DCS-7517 cameras up to firmware version 2.02.0 allows remote attackers to predict root passwords due to insufficient entropy in the password generation process. This could lead to unauthorized access to the device. The vulnerability is considered difficult to exploit but has been publicly disclosed.<\/td>\n<\/tr>\n
AI Severity<\/th>\nMedium<\/td>\n<\/tr>\n
Vendor<\/th>\nD-Link<\/td>\n<\/tr>\n
Product<\/th>\nD-Link DCS-6517 and DCS-7517<\/td>\n<\/tr>\n
Affected Version<\/th>\n2.02.0<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n