Skip to content
OpenAdvisories
Critical ICSA-25-343-03 1 CVE

Multiple India-based CCTV Cameras (Update A)**

Published Dec 9, 2025 · Updated Feb 5, 2026 · Revision 2

Vendor: D-Link (India Limited) Vendor: Securus CCTV Vendor: Sparsh Securitech Product: DCS-F5614-L1 Product: IP CCTV Cameras Product: Purple Series

Summary

Successful exploitation of this vulnerability could result in information disclosure, including capture of camera account credentials.

Vulnerabilities 1

  • Critical 9.4
    CVE-2025-13607

    D-Link CCTV camera model DCS-F5614-L1 Missing Authentication for Critical Function

    A malicious actor can access camera configuration information, including account credentials, without authenticating when accessing a vulnerable URL.

    D-Link DCS-F5614-L1 Network devices

Revision history

  1. #2

    Update A - Added response and mitigation from Securus as well as updated the affected products to include the Securus Purple Series.

  2. #1

    Initial Publication

References