{"id":"CVE-2026-125079","kind":"vulnerability","aliases":["CVE-2026-125079"],"related":[],"title":"D-Link DCS-6501LH camera: hard-coded credentials in Media Service enable remote access","description":"A vulnerability was determined in D-Link DCS-6501LH 3.03.02. This impacts the function pf_get_onvif_user_pwd/mydlink_default_sys_info of the file /mnt/conf/SystemConfig.ini of the component Media Service. This manipulation of the argument pin_code causes hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.","summary":"The D-Link DCS-6501LH camera firmware 3.03.02 ships hard-coded credentials in the Media Service, tied to the pin_code argument in SystemConfig.ini handling. A remote attacker can use these built-in credentials to gain access to the camera, and a public exploit has been disclosed.","severity":"medium","cvss":5.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["d-link","dcs-6501lh","firmware","infrastructure","iot-camera"],"not_affected_if":["other-firmware-versions"],"how_to_check":"- Check the camera firmware version in the web admin or mydlink app and compare it with `3.03.02`","fix":null,"status":"open","published_at":"2026-11-10T01:17:19+00:00","first_seen_at":"2026-11-10T01:26:41+00:00","triaged_at":"2026-11-10T01:28:58+00:00","updated_at":"2026-11-10T01:28:58+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-10T01:28:58Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"D-Link DCS-6501LH camera: hard-coded credentials in Media Service enable remote access","impact":"medium","summary":"The D-Link DCS-6501LH camera firmware 3.03.02 ships hard-coded credentials in the Media Service, tied to the pin_code argument in SystemConfig.ini handling. A remote attacker can use these built-in credentials to gain access to the camera, and a public exploit has been disclosed.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["d-link","dcs-6501lh","iot-camera","firmware"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"Attacker logs into camera remotely using built-in credentials","analyst_note":"Confirm the affected firmware range and whether D-Link has published a fixed version or advisory for DCS-6501LH; check the NVD page and D-Link security bulletins.","how_to_check":"- Check the camera firmware version in the web admin or mydlink app and compare it with `3.03.02`\n- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["other-firmware-versions"],"who_is_affected":"Owners of D-Link DCS-6501LH cameras running firmware 3.03.02 are exposed, especially if the camera's Media Service is reachable from the network or internet. The sources do not say whether other firmware versions are affected or whether a default configuration is required.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000745,"input_tokens":4592,"output_tokens":572,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-125079':20A,23A '-2026':19A,22A '/mnt/conf/systemconfig.ini':110C '3.03.02':44B,97C '6501lh':6A,29B,41B,96C 'access':17A,75B 'argument':59B,120C 'attack':65B,134C 'built':70B 'built-in':69B 'camera':7A,34B,42B,78B 'caus':123C 'code':10A,48B,58B,122C,126C 'compon':113C 'credenti':11A,49B,72B,127C 'cve':18A,21A 'd':2A,25B,37B,92C 'd-link':1A,24B,36B,91C 'dcs':5A,28B,40B,95C 'dcs-6501lh':4A,27B,39B,94C 'determin':89C 'disclos':85B,141C 'enabl':15A 'exploit':82B,137C 'file':109C 'firmwar':30B,43B 'function':101C 'gain':74B 'get':103C 'handl':62B 'hard':9A,47B,125C 'hard-cod':8A,46B,124C 'impact':99C 'infrastructur':31B 'initi':132C 'iot':33B 'iot-camera':32B 'link':3A,26B,38B,93C 'manipul':117C 'may':143C 'media':13A,52B,114C 'onvif':104C 'pf':102C 'pin':57B,121C 'possibl':130C 'public':81B,140C 'pwd/mydlink_default_sys_info':106C 'remot':16A,64B,135C 'servic':14A,53B,115C 'ship':45B 'systemconfig.ini':61B 'tie':54B 'use':67B 'user':105C 'util':145C 'vulner':87C","nicknames":[],"mitigations":[],"who_affected":"Owners of D-Link DCS-6501LH cameras running firmware 3.03.02 are exposed, especially if the camera's Media Service is reachable from the network or internet. The sources do not say whether other firmware versions are affected or whether a default configuration is required.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["dcs6501lh","dlink","firmware","infrastructure","iotcamera","medium"],"campaign_type":null,"search_a":"'-125079':20A,23A '-2026':19A,22A '6501lh':6A 'access':17A 'camera':7A 'code':10A 'credenti':11A 'cve':18A,21A 'd':2A 'd-link':1A 'dcs':5A 'dcs-6501lh':4A 'enabl':15A 'hard':9A 'hard-cod':8A 'link':3A 'media':13A 'remot':16A 'servic':14A","search_b":"'3.03.02':44B '6501lh':29B,41B 'access':75B 'argument':59B 'attack':65B 'built':70B 'built-in':69B 'camera':34B,42B,78B 'code':48B,58B 'credenti':49B,72B 'd':25B,37B 'd-link':24B,36B 'dcs':28B,40B 'dcs-6501lh':27B,39B 'disclos':85B 'exploit':82B 'firmwar':30B,43B 'gain':74B 'handl':62B 'hard':47B 'hard-cod':46B 'infrastructur':31B 'iot':33B 'iot-camera':32B 'link':26B,38B 'media':52B 'pin':57B 'public':81B 'remot':64B 'servic':53B 'ship':45B 'systemconfig.ini':61B 'tie':54B 'use':67B","search_c":"'/mnt/conf/systemconfig.ini':110C '3.03.02':97C '6501lh':96C 'argument':120C 'attack':134C 'caus':123C 'code':122C,126C 'compon':113C 'credenti':127C 'd':92C 'd-link':91C 'dcs':95C 'dcs-6501lh':94C 'determin':89C 'disclos':141C 'exploit':137C 'file':109C 'function':101C 'get':103C 'hard':125C 'hard-cod':124C 'impact':99C 'initi':132C 'link':93C 'manipul':117C 'may':143C 'media':114C 'onvif':104C 'pf':102C 'pin':121C 'possibl':130C 'public':140C 'pwd/mydlink_default_sys_info':106C 'remot':135C 'servic':115C 'user':105C 'util':145C 'vulner':87C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T01:17:19+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-125079","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-125079","severity":null,"published_at":"2026-11-10T01:17:19+00:00","modified_at":"2026-11-10T01:17:19+00:00","first_seen_at":"2026-11-10T01:26:41+00:00","fetched_at":"2026-11-10T01:26:41+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}