Dlink Mydlink Baby Camera Monitor vulnerabilities

1 vulnerability

Known vulnerabilities in Dlink Mydlink Baby Camera Monitor, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7CVE-2018-18767d-linkdcs-825l_firmware+1
EPSS score
0.63%
An issue was discovered in D-Link 'myDlink Baby App' version 2.04.06. Whenever actions are performed from the app (e.g., change camera settings or play lullabies), it communicates directly with the Wi-Fi camera (D-Link 825L firmware 1.08) with the credentials (username and password) in base64 cleartext. An attacker could conduct an MitM attack on the local network and very easily obtain these credentials.