CVE-2026-113735

Deferred Deferred - Pending Action

Weak Credentials in D-Link DCS-6501LH Firmware

Publication date: 2026-10-21

Last updated on: 2026-10-21

Assigner: VulDB

Description

A vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected by this vulnerability is the function mydlink_set_root_pwd of the file /mnt/mtd/aoni_ipc. Executing a manipulation can lead to use of weak credentials. The attack may be launched remotely. The attack requires a high level of complexity. The exploitation appears to be difficult. The exploit has been publicly disclosed and may be utilized.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-21

Last Modified

2026-10-21

Generated

2026-11-10

AI Q&A

2026-10-22

EPSS Evaluated

2026-11-08

NVD

CVE-2026-113735

EUVD

EUVD-2026-106879

Affected Vendors & Products

Vendor	Product	Version / Range
D-Link	DCS-6501LH	3.03.02

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1391	The product uses weak credentials (such as a default key or hard-coded password) that can be calculated, derived, reused, or guessed by an attacker.

Attack-Flow Graph

Executive Summary

CVE-2026-113735 is a vulnerability in the D-Link DCS-6501LH security camera where the root password is hardcoded and predictable. The password is generated from the device's model name and MAC address using an MD5 hash. The Telnet service is enabled by default, allowing remote attackers to compute the password offline and gain full root access without authentication.

Detection Guidance

Check if Telnet is enabled on the D-Link DCS-6501LH device by scanning for open port 23. Use commands like 'nmap -p 23 <device_IP>' to verify. Inspect the device's MAC address and model name to compute the predictable root password using the MD5 hash method described in the vulnerability details.

Run the PoC scripts from the provided GitHub repository to test if the device is vulnerable. Example: 'python3 poc_dcs6501lh_root_pwd.py <MAC_address>' to generate the password and attempt Telnet login.

Impact Analysis

An attacker could exploit this to gain unauthorized root access to the camera, potentially allowing them to monitor video feeds, modify settings, or use the device as a pivot point in a network. This could lead to privacy breaches or further network compromise if the camera is connected to a larger system.

Compliance Impact

This vulnerability could violate data protection regulations like GDPR or HIPAA by enabling unauthorized access to sensitive video data. Organizations using affected devices may face compliance violations, legal penalties, or reputational damage due to potential data breaches.

Mitigation Strategies

Disable Telnet access on the device if possible or restrict network access to the device. Update the firmware to a patched version if available from D-Link. Change the root password to a strong, unique value if the device allows it.

Isolate the device from untrusted networks and monitor for unauthorized access attempts. Consider replacing the device if no patch is available, as the vulnerability stems from hardcoded credentials.

Hi! I’m here to help you understand CVE-2026-113735. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...