D-Link Forums

D-Link Network Video Recorders => DNR-312L => Topic started by: GreenBay42 on March 09, 2018, 07:55:39 AM

Title: DNR-312L v1.07 Build 05 FW Update - BETA Release
Post by: GreenBay42 on March 09, 2018, 07:55:39 AM
Version 1.07.05 released to fix a security issue:

Firmware --> ftp://FTP2.DLINK.COM/SECURITY_ADVISEMENTS/DNR-312L/REVA/DNR-312L_REVA_FIRMWARE_v1.07.05.zip (ftp://FTP2.DLINK.COM/SECURITY_ADVISEMENTS/DNR-312L/REVA/DNR-312L_REVA_FIRMWARE_v1.07.05.zip)


Release Notes:

Discovered on 2/3/2018 - Davide Quarta ( Davde_dot_quarta_at_polimi_dot_it )

Problems Resolved:
The admin account password can be retrieved by a malicious user by accessing the /config/nvrroutine URI and de-obfuscating the password.