Approved changes feed: RSS · Atom

cpe:2.3:h:dlink:dcs-700l:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorDlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44)
ProductDcs 700L (67352aac-aa86-534b-b834-16553f4a8f2d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-1532 not_vulnerable 2026-06-08 07:49:08.827247 D-Link DCS-700L Music File Upload Service setUploadMusic uploadmusic path traversal
LOW (2.4)
A vulnerability was identified in D-Link DCS-700L 1.03.09. The affected element is the function uploadmusic of the file /setUploadMusic of the component Music File Upload Service. The manipulation of the argument UploadMusic leads to path traversal. The attack can only be initiated within the local network. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2026-01-28T20:32:09.118Z
Updated: 2026-02-23T09:00:44.948Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1419 not_vulnerable 2026-06-08 07:49:08.521018 D-Link DCS700l Web Form setDayNightMode command injection
MEDIUM (4.7)
A weakness has been identified in D-Link DCS700l 1.03.09. Affected is an unknown function of the file /setDayNightMode of the component Web Form Handler. Executing a manipulation of the argument LightSensorControl can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-01-26T04:32:08.759Z
Updated: 2026-02-23T08:56:42.817Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.