Description
A vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected by this vulnerability is the function mydlink_set_root_pwd of the file /mnt/mtd/aoni_ipc. Executing a manipulation can lead to use of weak credentials. The attack may be launched remotely. The attack requires a high level of complexity. The exploitation appears to be difficult. The exploit has been publicly disclosed and may be utilized.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| D-Link | DCS-6501LH | 3.03.02 | — |
References
- VDB-422885 | D-Link DCS-6501LH aoni_ipc mydlink_set_root_pwd weak credentials vdb-entry technical-description
- VDB-422885 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-113735 | CVE Analysis and Report third-party-advisory
- Submit #1015788 | D-Link DCS-6501LH network camera Firmware DCS6501LHCx_FW303B02_SD.zip, application version V3.03.02 Predictable Password third-party-advisory
- https://github.com/XueDugu/dlink-dcs6501lh-predictable-telnet-root-evidence related
- https://github.com/XueDugu/dlink-dcs6501lh-predictable-telnet-root-evidence/tree/main/poc exploit
- https://www.dlink.com/ broken-link product