CNNVD-202602-1369 Information

CNNVD ID

CNNVD-202602-1369

CVE-2026-2218

  • CNNVD Published: 2026-02-09

Description (Chinese)

D-Link DCS-933L是中国友讯(D-Link)公司的一个无线摄像头。 D-Link DCS-933L 1.14.11及之前版本存在命令注入漏洞,该漏洞源于对组件alphapd中文件/setSystemAdmin参数AdminID的错误操作,可能导致命令注入。

Description (English)

D-Link DCS-933L is a wireless camera of D-Link. The D-Link DCS-933L 1.14.11 and previous versions contain a command-injecting loophole, which results from an error in the AdminID for the file/setSystemAdmin parameter in component alphapd, which may lead to the command-injection.

Hazard Level

High

Vulnerability Type

命令注入

Affected Vendor

友讯

Published

2026-02-09

Last Modified

2026-02-24

References

https://vuldb.com/?id.344936 https://vuldb.com/?ctiid.344936 https://www.dlink.com/ https://vuldb.com/?submit.753247 https://github.com/jinhao118/cve/blob/main/D-Link%20DCS933L_v1.14.11.md https://github.com/jinhao118/cve/blob/main/D-Link%20DCS933L_v1.14.11.md#poc https://access.redhat.com/security/cve/cve-2026-2218

Share on: