CVE-2026-113735 Details
Description
A vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected by this vulnerability is the function mydlink_set_root_pwd of the file /mnt/mtd/aoni_ipc. Executing a manipulation can lead to use of weak credentials. The attack may be launched remotely. The attack requires a high level of complexity. The exploitation appears to be difficult. The exploit has been publicly disclosed and may be utilized.
A vulnerability in the D-Link DCS-6501LH camera, specifically in version 3.03.02, allows for the prediction of the root password. This is achieved through the 'mydlink_set_root_pwd' function, which derives the password from the device's MAC address and model information. The vulnerability can be exploited remotely, taking advantage of a default-enabled Telnet service on the device. The exploitation involves a high level of complexity, as it requires knowledge of the device's MAC address to compute the root password offline.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 21, 2026CISA-ADP
Assessed Oct 21, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/XueDugu/dlink-dcs6501lh-predictable-telnet-root-evidence | [email protected] | ExploitTechnical Analysis |
| https://github.com/XueDugu/dlink-dcs6501lh-predictable-telnet-root-evidence/tree/main/poc | [email protected] | Exploit |
| https://vuldb.com/cve/CVE-2026-113735 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/submit/1015788 | [email protected] | Issue TrackingPermission Required |
| https://vuldb.com/vuln/422885 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/vuln/422885/cti | [email protected] | Content Wall |
| https://www.dlink.com/ | [email protected] | Vendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-1391 | Use of Weak Credentials | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| D-Link DCS-6501LH | 3.03.02 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 21, 2026 | CVE Modified | CISA-ADP |
| Oct 21, 2026 | New CVE Received | [email protected] |