ID
VAR-202505-2067
CVE
CVE-2025-5215
TITLE
D-Link Systems, Inc. of DCS-5020L Out-of-bounds write vulnerability in firmware
Trust: 0.8
DESCRIPTION
A vulnerability classified as critical has been found in D-Link DCS-5020L 1.01_B2. This affects the function websReadEvent of the file /rame/ptdc.cgi. The manipulation of the argument Authorization leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. D-Link Systems, Inc. of DCS-5020L An out-of-bounds write vulnerability exists in firmware.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. D-Link DCS-5020L is a DCS series IP camera from D-Link of China. D-Link DCS-5020L has a buffer overflow vulnerability. The vulnerability is caused by the failure of the parameter Authorization in the file /rame/ptdc.cgi to correctly verify the length of the input data. Attackers can use this vulnerability to execute arbitrary code on the system or cause a denial of service
Trust: 2.16
IOT TAXONOMY
| category: | ['ICS'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | dlink | model: | dcs-5020l | scope: | eq | version: | 1.01_b2 | Trust: 1.0 |
| vendor: | d link | model: | dcs-5020l | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | d link | model: | dcs-5020l | scope: | eq | version: | dcs-5020l firmware 1.01 b2 | Trust: 0.8 |
| vendor: | d link | model: | dcs-5020l | scope: | - | version: | - | Trust: 0.8 |
| vendor: | d link | model: | dcs-5020l 1.01 b2 | scope: | - | version: | - | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-121 | Trust: 1.0 |
| problemtype: | CWE-787 | Trust: 1.0 |
| problemtype: | CWE-119 | Trust: 1.0 |
| problemtype: | Buffer error (CWE-119) [ others ] | Trust: 0.8 |
| problemtype: | Stack-based buffer overflow (CWE-121) [ others ] | Trust: 0.8 |
| problemtype: | Out-of-bounds writing (CWE-787) [NVD evaluation ] | Trust: 0.8 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2025-5215 | Trust: 3.2 |
| db: | VULDB | id: | 310311 | Trust: 1.8 |
| db: | JVNDB | id: | JVNDB-2025-006405 | Trust: 0.8 |
| db: | CNVD | id: | CNVD-2025-11224 | Trust: 0.6 |
REFERENCES
| url: | https://github.com/xiaobor123/vul-dlink-dcs5020l | Trust: 1.8 |
| url: | https://github.com/xiaobor123/vul-dlink-dcs5020l#poc | Trust: 1.8 |
| url: | https://vuldb.com/?id.310311 | Trust: 1.8 |
| url: | https://vuldb.com/?submit.582935 | Trust: 1.8 |
| url: | https://www.dlink.com/ | Trust: 1.8 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2025-5215 | Trust: 1.4 |
| url: | https://vuldb.com/?ctiid.310311 | Trust: 1.0 |
SOURCES
| db: | CNVD | id: | CNVD-2025-11224 |
| db: | JVNDB | id: | JVNDB-2025-006405 |
| db: | NVD | id: | CVE-2025-5215 |
LAST UPDATE DATE
2025-06-07T23:45:30.659000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-11224 | date: | 2025-05-30T00:00:00 |
| db: | JVNDB | id: | JVNDB-2025-006405 | date: | 2025-06-06T07:47:00 |
| db: | NVD | id: | CVE-2025-5215 | date: | 2025-06-05T15:59:44.683 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-11224 | date: | 2025-05-30T00:00:00 |
| db: | JVNDB | id: | JVNDB-2025-006405 | date: | 2025-06-06T00:00:00 |
| db: | NVD | id: | CVE-2025-5215 | date: | 2025-05-27T00:15:32.127 |