D-Link Forums
D-Link Network Video Recorders => DNR-312L => Topic started by: GreenBay42 on March 09, 2018, 07:55:39 AM
-
Version 1.07.05 released to fix a security issue:
Firmware --> ftp://FTP2.DLINK.COM/SECURITY_ADVISEMENTS/DNR-312L/REVA/DNR-312L_REVA_FIRMWARE_v1.07.05.zip (ftp://FTP2.DLINK.COM/SECURITY_ADVISEMENTS/DNR-312L/REVA/DNR-312L_REVA_FIRMWARE_v1.07.05.zip)
Release Notes:
Discovered on 2/3/2018 - Davide Quarta ( Davde_dot_quarta_at_polimi_dot_it )
Problems Resolved:
The admin account password can be retrieved by a malicious user by accessing the /config/nvrroutine URI and de-obfuscating the password.